Chapter 4 – Information Technology

49190.10 Security Variance Process

• If compliance is not feasible, or if deviation from this policy is necessary to support a business function, the respective manager shall formally request a security variance as defined by the ISOInformation Security Officer.