A standard cannot be met for a legitimate case. What should the exception process look like, and what does the register tell you?

What the process should look like

• A named approver at a level appropriate to the risk, so approval is a decision rather than a formality.
• A written rationale, which is what a future reader needs and what makes the pattern of exceptions analysable.
• A time bound by default, so an exception granted for a temporary reason expires rather than becoming permanent. A permanent exception should be an explicit choice.
• Fast. An exception process taking three weeks will be bypassed, which returns the organisation to silent violation with added ceremony — and a silent violation provides less assurance than a recorded one.
• A compensating control where possible, so the risk is reduced rather than merely accepted.

What the register tells you

Whether the standard is right. Thirty exceptions against one standard means it describes the wrong rule, and that signal exists only if exceptions are recorded rather than improvised.

A cluster of exceptions is a standard that needs rewriting, not a compliance problem — and the aggregate review that surfaces it is the register's most valuable use and the one most often omitted.

It also tells you the true state of the estate: the standard plus the register is the truth, while the standard alone is an aspiration.

Why a standard with no exception route fails

It is violated silently rather than deliberately. Teams face legitimate cases the standard did not anticipate, and without a sanctioned route they take the unsanctioned one — after which the organisation neither knows the deviation exists nor why.

Making deviation visible and deliberate is a better outcome than either enforcement or unrecorded violation.

The proportionality that keeps it usable

Exceptions for high-consequence standards need real approval; exceptions for lower ones can be self-declared with a record. The record is the essential part — the approval is what can be scaled down where the risk permits, and scaling it uniformly is what makes the process slow enough to be bypassed.