Glossary: Vulnerability Management and Monitoring

exception

Also written: exceptions

A temporary, approved permission not to meet a rule, with an owner, a reason, compensating controls and an expiry date, such as the 14-day exception for the payment plug-in. In alert tuning, an exception is a limited rule carve-out for a known source, such as the scanner during its Wednesday window.