University of Michigan Information and Technology Services (ITS) recognizes that U-M units and individuals may operate in complex, evolving environments where strict compliance with the Information Assurance and IT Security Policy or related standards is not always feasible, despite reasonable efforts. The ITS Security Policy Exception process provides a structured pathway for requesting and reviewing exceptions in such circumstances. Through this process, ITS partners with requestors to support operational needs while ensuring appropriate safeguards remain in place to protect U-M’s institutional information assets. The process is intended to balance practical flexibility with the university’s ongoing commitment to information security.