Risk And Control
Policy Exception Register
Track policy exceptions by severity, owner, mitigation, approval tier, aging, evidence, linked requirements, and UAT coverage.
Policy Exceptions
5
Portfolio sample
Pending Approval
2
Critical Severity
1
Average Aging
7 days
2 overdue
Exception Governance Filters
Review exceptions by approval status and severity to simulate risk and control oversight.
Exception Register
Each row is linked to BA requirements, UAT coverage, mitigation, approval authority, and evidence.
| Exception | Severity | Status | Owner | Aging | Approval Tier | Evidence |
|---|---|---|---|---|---|---|
EXC001: Missing latest audited financial statement Term Loan / Management accounts, bank statements, and tax return required as alternate evidence. | Major | Pending Approval | Credit Analyst | 6 days | Country Credit Committee | Waiver form, exception memo, approver decision, and audit timestamp. |
EXC002: Unsecured exposure above standard threshold Overdraft / Additional repayment capacity analysis and monthly conduct monitoring. | Critical | Pending Approval | Approver | 9 days | Group Credit Committee | Exception register, committee approval note, and route override history. |
EXC003: High risk customer EDD pending Trade Line / EDD checklist to be completed before submission to Credit Review. | Major | Draft | RM | 3 days | Country Credit Committee | EDD checklist, screening result, and compliance review note. |
EXC004: Corporate guarantee authority evidence incomplete Bank Guarantee / Board resolution obtained with authorized signatory verification. | Minor | Approved | Credit Admin | 2 days | Regional Credit Manager | Board resolution, signatory evidence, and guarantee agreement. |
EXC005: Trade facility product document mapping pending Trade Line / Product owner to confirm final document mapping before next UAT cycle. | Minor | Expired | System Admin | 14 days | Regional Credit Manager | Product owner sign-off and updated checklist rule mapping. |
Control Lens
Exceptions are not just notes. A strong banking workflow records severity, mitigation, approval authority, aging, evidence, and UAT coverage.
Release Gate
Critical or expired exceptions should be reviewed before production sign-off.
Pending approval exceptions should remain visible in dashboard and approval memo.
Each exception should map to at least one requirement and UAT test case.