# Risk decision

SecNet.Work · Security exceptions and risk acceptance · 2026.10

Authority, duration and conditions.

Blank organizational workpaper. Enter real contact, asset and data details only in a controlled organizational copy. This file is not evidence, organizational approval or an automated compliance decision.

- Do not treat silence as approval.

| Authority | Decision | Condition | Expiry | Early trigger |
| --- | --- | --- | --- | --- |
|  |  |  |  |  |
|  |  |  |  |  |
|  |  |  |  |  |
|  |  |  |  |  |
|  |  |  |  |  |

## Approval and follow-up

| Version | Owner | Approval | Review |
| --- | --- | --- | --- |
|  |  |  |  |

## Official references

- [NIST SP 800-37 Rev. 2 — Risk Management Framework](https://csrc.nist.gov/pubs/sp/800/37/r2/final)
- [NIST IR 8286 Rev. 1 — Cybersecurity and ERM](https://csrc.nist.gov/pubs/ir/8286/r1/final)