Security Policy Exception

Fulfillment:  Due to the variable nature of this request item, fulfillment time will differ on a case-to-case basis. SLE will be communicated following the finalization of customer requirements.

Customer

• Responsible for adhering to the EOTSS Standard Rules of Engagement.
• Responsible for submitting accurate information to EOTSS during the intake and discovery process.
• Sharing complete requirements will ensure that accurate SLEs are provided and met.
• Responsible for including a plan to mitigate the identified risks when submitting a request for this service.
• Upon receiving approval from the Enterprise Risk Management Team, customers are responsible for initiating a new request for implementation.  The ERM approval document should be attached to the implementation request.

EOTSS

• Responsible for coordinating discovery meeting(s) with the customer.
• Once all requirements are collected/finalized following intake and discovery, EOTSS will determine the appropriate SLE for the request and communicate to the customer.
• Responsible for providing a ruling on the exception pending review of the request.
• For approved requests ONLY: Responsible for communicating decision to the customer and providing the exception expiration date.