Exceptions

Exceptions to the information security program and any related policies or procedures may be made where costs greatly exceed the risk of non-compliance.

Exception requests are reviewed and analyzed by the Campus Information Security Committee. Exceptions that have been approved will be documented.