Patch exemption approval workflow
Overview
“Never patch production ERP Friday” needs formal risk acceptance—not verbal myth.
Workflow
Engineer requests exemption with technical justification → Security reviews compensating controls → Exec approves time-bound waiver.
Max duration
30–90 days then forced re-test or emergency patching.
Documentation
Store PDF in risk register; link in PSA ticket.
Audit
Quarterly review all active exemptions—no zombie exceptions.
Related Articles
EDR deployment checklist for new workstations
## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...
Handling Defender for Business false positives
## Overview False positives waste analyst time and train users to ignore alerts. This article stand...
Application allowlisting with Windows Defender ASR rules
## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...