Glossary: Governance, Risk and Compliance

exception (audit)

Also written: exception, exceptions

A tested case where a control didn't work, such as change ticket T1033 having no approver. It is not the same as a policy exception.