INFORMATION SYSTEM UNIT
EXCEPTION REQUEST FORM
Section 1: Exception
1.1 Requestor Information
Name: Phone/ email: Date:
NORHANI BINTI ADNAN hani@[Link] 26 April, 2021
Department:
OPERATION – IT UNIT
1.2 Exception Details
Policy Reference: Scope and Division: Exception Review
IT POLICY AND PROCEDURE: Date:
GRAND SAGA TOLL COLLECTION USER ACCESS MANAGEMENT
SYSTEM 26 April, 2021
GSSB/IT-TCS-004/2020
Entity Impacted:
TOLL COLLECTION SYSTEM
System(s) Hardware Impacted (if applicable):
TOLL COLLECTION SYSTEM SERVERS
Will this impact the process, data transmission or system flow? Yes No
X
1.3 Reason for Exception Request
- Reset Lockout Count - Maximum Password Age
- Account Lockout Duration - Password Never Expired
1.4 Description/Assessment Risk
i. The control setting give significant implication to the toll collection system flow. the data
transmission and parameter would not be transferred and updated in timely manner.
ii. frequent password change setting may lead to system downtime and critical systems
become inaccessible
1.5 Compensating Controls (to mitigate risk associated with non-compliance)
i. this exception would only apply for System Service User, not for normal account user
ii. Our Toll Collection System reside in close environment.
1.6 Corrective Action Plan
1. To perform a risk assessment and deviation, documented in the GSSB policies and procedures for an
exception, and get approval from management
2. To update our IT Policy
Section 2: Requestor Authorizations
Requestor: Signature: Date:
[System Owner]:
(Name and Position)
Reviewed by: Signature: Date:
[IT Unit]:
(Name and Position)
Seconded by: Signature: Date:
[HOD]:
(Name and Position)
Concurred by: Signature: Date:
[HOC]:
(Name and Position)
Section 3: Exception Approval/Denial
Exception: Signature: Date:
____
Approved
____
[EXECUTIVE DIRECTOR]:
Denied
(Name and Position)
Reason for Denial:
3.1 IT UNIT: Effective Date:
Appendix A Page 2 of 3
Appendix A Page 3 of 3