Skip to content
Notifications
Clear all

How do I handle a control that's marked as 'failed' but we have a valid exception?

1 Posts
1 Users
0 Reactions
3 Views
(@eval_rookie_42)
Reputable Member
Joined: 4 months ago
Posts: 158
Topic starter   [#5458]

I’m new to Vanta and we’re preparing for our first audit. During a test run, Vanta flagged a control as ‘failed’ because we have a policy exception for it. The exception is documented and approved internally.

I’m not sure how to proceed in Vanta. Do I just add a note to the control explaining the exception? Or is there a specific way to mark it as ‘excepted’ so it doesn’t count against our compliance score? I want to make sure the auditor sees we’ve handled this correctly.



   
Quote