When to use this
Use this record when secure coding rules cannot be fully applied because of legacy constraints, technology limits, or justified operational need.
Related controls
Exception record
| Exception ID | Component | Standard/rule affected | Reason | Risk impact | Compensating control | Approved by | Review date |
|---|---|---|---|---|---|---|---|
| TBD | TBD | TBD | TBD | TBD | TBD | TBD | TBD |
Minimum checks
- Exception reason is documented.
- Risk impact is assessed.
- Compensating control is defined.
- Approval is recorded.
- Review date is set.
- Template
- Iso27001
- Technological controls
- Secure coding
Note Metadata
Aliases: Coding Standard Exception Record
Source: 90 Templates/Secure Coding Exception Record.md