When to use this
Use this register to record approved web filtering exceptions, false positives, and business-required access to otherwise blocked categories.
Related controls
Exception register
| Request ID | Site/category | Requester | Business reason | Risk review | Approved by | Expiry/review date | Status |
|---|---|---|---|---|---|---|---|
| TBD | TBD | TBD | TBD | TBD | TBD | TBD | Open |
Minimum checks
- Business reason is documented.
- Security risk is reviewed.
- Approval is recorded.
- Exception is time-bound where practical.
- Exception is reviewed.
- Template
- Iso27001
- Technological controls
- Web filtering
Note Metadata
Aliases: Web Filtering Exceptions
Source: 90 Templates/Web Filtering Exception Register.md
Related Notes
- A.8.23 Audit Evidence Pack
- ISO 27001 A.8.23 - Web Filtering
- A.8 Technological Controls MOC
- A.8 Technological Controls Implementation Guide
- A.8 Technological Controls Audit Guide
- A.8 Technological Controls Implementation Audit Risk Mapping
- A.8.23 Audit Checklist
- Web Filtering Policy and Category Matrix
- Templates MOC