Prove
Exceptions and accepted risk
Every accepted risk has an owner, an expiry date and a live check behind it.
- Owner, compensating control, residual risk and expiry for each exception
- A live check watches the condition behind each exception
- Owners are reminded before an exception expires

