---
title: Request an extension for an exception rule
description: Request an extension for a deferred exception rule before it reaches its deferred until due date. As a remediation owner, you’re no longer required to wait until the deferred due date to make this request.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response/extend-ex-rule-request.html
release: australia
product: Vulnerability Response
classification: vulnerability-response
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 2
breadcrumb: [Working with an exception rule, Vulnerability Response remediation overview, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Request an extension for an exception rule

Request an extension for a deferred exception rule before it reaches its deferred until due date. As a remediation owner, you’re no longer required to wait until the deferred due date to make this request.

## Before you begin

Role required: sn\_vul.exception\_approver

## About this task

You can also request an extension from the Vulnerability Response Workspaces. For more information, see [Request an extension for a deferred vulnerable item in the Vulnerability Manager workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-manager-workspace/extend-defer-vul-item-ws.md).

## Procedure

1.  Navigate to **All** > **Vulnerability Response** > **Exception Rules**.

2.  Select an approved exception rule.

3.  Select **Request Extension**.

4.  Fill in the fields on the form, as appropriate.

<table id="table_s52_yvn_r6"><thead><tr><th>

Field

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Extend Until

</td><td>

Select the date until when the exception rule must be extended.

</td></tr><tr><td>

Reason

</td><td>

Enter the reason for deferring the exception rule. Choices include:

-   Risk accepted
-   Awaiting maintenance window
-   Fix unavailable
-   Mitigating control in place
-   Other


</td></tr><tr><td>

Additional information

</td><td>

Enter any other relevant information.

</td></tr></tbody>
</table>5.  Select **Request Approval**.

    On approval of the request, the Deferred until, Reason and Additional information fields get updated on the exception rule and the associated remediation tasks and vulnerable items. An email is also triggered on submission of the request and subsequent action by the approver.

    **Note:**

    -   The request goes through two levels of approval.
    -   The Request Extension button is unavailable for remediation tasks that are created as part of an exception rule.
    -   If a deferred exception rule is extended again, the extend deferral count increases in the backend.
    -   Starting from v21.0 of Vulnerability Response, you can configure the time frames for approving false positives and exceptions, along with email notifications for both the approver and requester after a set number of days. When a request is raised, the vulnerable item changes to In-Review status and a state change record is created. If the approver doesn't respond within the configured time frame, the vulnerable item or remediation task reverts to Open status. The previous state is stored in the **backup\_state** field. For more information, see [Configure approval rules for Exception Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/exception-mgt-approval-rules.md).