How to request and approve an exception or risk acceptance

Short answer: In Findings & actions → Exceptions choose Request an exception: type, reason, start, expiry (required, at most three years), approver, what it is about and a compensating control, then Request approval. The approver opens the Decision tab, chooses Approve or Reject with a note and Record decision.

Verified for PVology 0.49.0 · updated 2026-10-10

When to use this

A control cannot operate, a policy cannot be followed, or a risk or finding must be accepted for a limited time.

This is a free preview. Creating a PVology account is free.

Need more help? Contact PVology