Set Exceptions on Checks

Check exceptions let you exclude individual checks from your compliance score while keeping the rest of the control active. This is useful when a control is mostly relevant to your organization but a specific check doesn't apply to your environment.

Like control exceptions, there are two types:

• Risk acceptance: Temporarily exclude a check for a set time period while your team works toward meeting it.
• Disable: Permanently exclude a check from your compliance score. A disabled check remains excluded unless you re-enable it.

Set an exception on a check

Note: Only team members with Editor or Owner access can perform this task.

1. In the Mondoo Console, navigate to the space you want to customize.

   

2. In the side navigation bar, select Compliance.

   

3. Select the framework you want to customize and scroll down to the list of controls.

   

4. Select the control containing the check you want to set an exception for, then check the box beside that check.

   

5. Select the SET EXCEPTION button.

   

6. Select the exception type and time period, then provide a justification. The approver will use this justification when reviewing the exception.

7. Select the SAVE EXCEPTION button.

Approve or reject an exception

Exceptions take effect immediately. However, as an extra tracking step, a team member can approve or reject an exception:

• Approve: The exception remains in place.
• Reject: The exception is removed and the check is re-enabled.

Note: Only team members with Editor or Owner access can perform this task.

1. In the Mondoo Console, navigate to the space you want to work in.

   

2. In the side navigation bar, select Compliance.

   

3. Select the framework you want to work in and scroll down to the list of controls.

   

4. Select the control containing the check exception you want to review, then select the Exceptions tab.

   

5. Select the Reject button to remove the exception, or select the Approve button to keep it.

Re-enable a check

Note: Only team members with Editor or Owner access can perform this task.

1. In the Mondoo Console, navigate to the space you want to work in.

   

2. In the side navigation bar, select Compliance.

   

3. Select the framework you want to work in, then select the control containing the check you want to re-enable.

   

4. Select the check with an exception that you want to re-enable.

   

5. Select the REMOVE EXCEPTION AND ENABLE button, then confirm by selecting YES, ENABLE THE CHECK.

---