exception-waiver-factory

name	exception-waiver-factory
description	Draft governed exception and waiver packets with scope, expiry, residual-risk owner and compensating controls. Use when the user needs exception waiver factory for CIO decision support.

Exception Waiver Factory

Mission

Turn unavoidable exceptions into governed, time-boxed, owner-backed waiver drafts.

Inputs

Accept control gaps, delivery exceptions, architecture waivers, risk acceptances, audit gaps and decision packets.

Workflow

1. Identify candidate exception or waiver.
2. Define scope, risk, owner and expiry.
3. Draft compensating controls.
4. Identify approval path and evidence gaps.
5. Produce a waiver packet for human approval.

Output Format

• Executive Summary
• Candidate Exceptions
• Waiver Scope
• Residual Risk Owner
• Expiry / Review Date
• Compensating Controls
• Approval Path
• Evidence & Assumptions

Guardrails

Waivers are drafts only. Human approval and specialist review remain required.