---
sourceDocument: Australia Governance, Risk, and Compliance
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/governance-risk-compliance

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Manage policy exceptions and extensions

# Manage policy exceptions and extensions {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Policy exceptions and extensions provide temporary relief for non-compliant
controls.

The policy exception captures the rationale, comments, and evidence to support the acceptance
or rejection of a policy exception request. Also, you can request an extension to an approved
policy exception before the policy exception validity period. The control owner, the compliance
manager, and the risk manager may be involved in the policy exception and extension workflow.
* **[Request a policy exception](https://servicenow-prod.fluidtopics.net/bdkL005ccZhD85G3OGTekA)**   
  Users can request exceptions for policies, control objectives, or issues by specifying the reason of exception on a particular list of the systems, applications, networks, or entities for which the exception will apply. The user must also specify the duration for which the exception is required.
* **[Request an extension to policy exception](https://servicenow-prod.fluidtopics.net/IpbqeAcn6GMDQ8~~MH8l0A)**   
  Request an extension for the policy exception that you created.
* **[Review the policy exception and extension request](https://servicenow-prod.fluidtopics.net/5h4d1TG_I44EdqvesjaAqw)**   
  After reviewing a policy exception request, a compliance manager can accept or reject the request. However, if the compliance manager doesn't have enough information decide, they can request a risk assessment by the risk manager.
* **[Request a policy exception through Service Portal](https://servicenow-prod.fluidtopics.net/lIP5qBKliQ20yS7vWPjKow)**   
  Your employees and business users within your company can request a policy exception through the ServiceNow® Service Portal.
* **[Request a policy extension through Service Portal](https://servicenow-prod.fluidtopics.net/IR8scO_THp0OPBF91ihaMg)**   
  From the ServiceNow® Portal, anyone who has requested a policy exception can request an extension before the policy deadline.
* **[Policy Exception Integration with Vulnerability Response](https://servicenow-prod.fluidtopics.net/id4HQqt29ibkm_SvLDwtrQ)**   
  Starting with Version 10.1, you can request policy exceptions using the GRC policy exception management capability inherent in the Policy and Compliance Management application from within version 10.3 of the Vulnerability Response application.