---
title: Request exception form fields for policy exceptions
description: The following table shows the fields that you must fill on the Request exception form for policy exceptions.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/it-remediation-workspace/itr-ws-request-exception-form-grc.html
release: australia
product: IT Remediation Workspace
classification: it-remediation-workspace
topic_type: reference
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Reference, IT Remediation Workspace, Vulnerability Response Workspaces, Unified Security Exposure Management, Security Operations]
---

# Request exception form fields for policy exceptions

The following table shows the fields that you must fill on the Request exception form for policy exceptions.

<table id="table_fml_xt3_fwb"><thead><tr><th>

Field

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Policy

</td><td>

Vulnerability Management policy that you’re requesting an exception for.

</td></tr><tr><td>

Control objective

</td><td>

Control objectives associated with the policy that you selected. If a policy isn’t selected, all the control objectives are listed.

</td></tr><tr><td>

Valid from

</td><td>

Date when the exception starts. The default value is the current date. This date can't be in the past.

</td></tr><tr><td>

Valid until

</td><td>

Date that the policy exception expires and the state of the vulnerable item or group changes from Deferred to Open.**Note:** The number of days that the policy exception is valid can't exceed the value in the **Maximum exception duration \(days\)** field that you set for the policy. For more information, see [Create a policy](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/governance-risk-compliance/t_DefineAPolicy.md).

</td></tr><tr><td>

Reason

</td><td>

Reason for requesting an exception.

</td></tr><tr><td>

Justification

</td><td>

Details related to the reason this exception is being requested. This field must be filled in by the remediation owner.

</td></tr></tbody>
</table>**Related topics**  


[Request an exception using GRC: Policy and Compliance Management in the IT Remediation Workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/it-remediation-workspace/vr-ws-request-exception-grc.md)