Use risk framing to approve, modify, or reject a student-record process exception.
The exception request A college wants temporary student-record export access before commencement. The deadline is real, but uncontrolled copies create lasting risk. Risk-managed exception Prepare, categorize, control, authorize, monitor Use RMF logic to avoid the false choice between yes to everything and no to every exception. Scope is a control Smaller data, fewer users, shorter time. Controlled temporary exception Do not approve an exception without a closure path. 01 Categorize 02 Control 03 Authorize Categorize the risk Step 1
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in