Information Technology Exception
Technological University Dublin is dedicated to ensuring the security of its information and computing infrastructure, which underpins the critical functions of the University. To guide the University community in achieving these objectives, the institution has established guidelines, standards, procedures, and policies that all users are obligated to adhere to.
However, the University acknowledges that there may be technical limitations, business needs or academic pursuits that necessitate deviations from these established policies. As a result, the University has implemented an exceptions process that allows users to request exceptions from the established standards which will be reviewed by Technology Services on a case-by-case basis.
How do I engage in this process?
If you wish to apply for an exception to a Technology Services guideline, standard, procedure, or policy a request should be made by logging an IT Exception Service Request with the IT Service Desk. The IT Exception Service Request can be found in the IT self-service portal or by clicking on the link below:
Please note: Line Manager or Supervisor may need to approve requests being submitted for review depending on the nature of the request.
The exception request must include the following information:
- A description of the non-compliance and a reason for requesting the exception.
- The length of time the exception is required for (up to 12 months).
- The risks that may be associated with non-compliance.
- Proposed measures for managing the risks associated while non-compliant.
- Proposed actions for a permanent solution for non-compliance.
Upon submission of the IT Exception Service Request, the requester and line manager\supervisor (if applicable) will be notified to confirm receipt of the request.
Once the exception request has been reviewed by Technology Services the requester will be notified of the decision in writing.
Definitions
IT Exception: An IT Exception refers to a deviation from established IT policies, standards, procedures, or guidelines within the University. It signifies a situation where a specific circumstance or need requires an alternative approach or departure from the usual rules or guidelines.
Process Scope: This process applies to all staff, students, third parties or any user with access to TU Dublin IT resources or data.
Exception Rejection: In the event that an exception is denied, the requester may seek a meeting with Technology Services to discuss the circumstances of the rejection.
Exception Type: There are two types of IT exception requests.
Individual: Individual exceptions are applicable in instances where the requester is the only subject affected by the exception. (e.g. a password exception for a single user). An individual exception does not require Line Manager or Supervisor approval.
Business: Business exceptions relate to exceptions that affect more than the requester (e.g. an exception for a server or business application). A business exception does require Line Manager, Supervisor or Business\Data Owner approval.
Exception Examples: Some examples of an IT Exception would be:
A business application that is technically not capable of using a 14-character password as required by the TU Dublin Password Policy.
A user who has lost their phone may require an exception from using MFA until they get a replacement phone.
A server running an old operating system needs to be accessible for a period of time before being decommissioned.