# Exception request

SecNet.Work · Security exceptions and risk acceptance · 2026.10

Unmet requirement and scope.

Blank organizational workpaper. Enter real contact, asset and data details only in a controlled organizational copy. This file is not evidence, organizational approval or an automated compliance decision.

- Identify external obligations separately.

| Requirement source | Target/service | Reason | Alternative | Requester |
| --- | --- | --- | --- | --- |
|  |  |  |  |  |
|  |  |  |  |  |
|  |  |  |  |  |
|  |  |  |  |  |
|  |  |  |  |  |

## Approval and follow-up

| Version | Owner | Approval | Review |
| --- | --- | --- | --- |
|  |  |  |  |

## Official references

- [NIST SP 800-37 Rev. 2 — Risk Management Framework](https://csrc.nist.gov/pubs/sp/800/37/r2/final)
- [NIST IR 8286 Rev. 1 — Cybersecurity and ERM](https://csrc.nist.gov/pubs/ir/8286/r1/final)