Term Kind Topic What it is
Exception and Waiver Management practice Exception & Waiver Management The formal process for permitting a deviation from a standard, with a named risk owner, a stated expiry and a remediation plan.
Exception Register Waiver Management, Control Deviation Record, Risk Acceptance Log practice Exception & Waiver Management A recorded, owned, time-bounded set of approved deviations from a control - which is what makes a control survivable, and whose aggregate is the best available evidence about whether the control fits reality.
Time-Boxed Waiver practice Exception & Waiver Management An approved deviation from a standard that carries an owner, a justification, a compensating control and an expiry date after which it is reconsidered.
Waiver Expiry Time-Bounded Exception, Expiring Risk Acceptance practice Exception & Waiver Management A mandatory end date on every exception to a standard, so that continuing the exception is an active decision rather than the default.