Exception Request Ass
"Lives under the control framework, not inside it."
Has never met a security control they could not request an exception to. The policy applies to everyone, in spirit, except for this one system, this one deadline, and this one recurring circumstance that has now lasted three years. Compliant on paper, exempt in practice.
Know someone who has earned the Exception Request Ass? Put them up for it.
