Secure Computing

Request an Information Security Policy Exception

Yale Policy - Information Security Requirement Exception Requests

Information Security Policies are central to Yale's ability to maintain reliable IT services for the Yale community. These policies also ensure Yale and its employees conduct themselves in compliance with laws, contracts and other University policies.

The size of Yale University prevents its leadership from crafting policies that address every possible scenario that we may encounter at Yale. Some Yale policies allow for policy exceptions for this reason. Exceptions may be possible under certain compelling circumstances and such determination should be made by Information Security, Policy and Compliance (ISPC).When ISPC receives such a request, it will evaluate the merit of each request. An exception may be granted should ISPC determines such an exception will not create any undue risk to the university. ITS is committed to protect Yale data, maintain compliance and support the university's mission.

The process outlined below was created to provide a transparent way for you to request a policy exception.

When an Exception will be Granted

The faculty mission will not be impeded. Academic and research needs will be accommodated. Every effort will be made to not impact the individuals mission oriented work. However, policy exceptions will not be granted for convenience, nor if no appropriate alternate security controls can be found to address any risk posed by the exception.

Exception Process

Who can use it?

Faculty and staff in the Yale community with an active and valid NetID..

How much does it cost?

This services is available at no charge to the Yale community.

How do I get it?

Follow these steps to submit a policy exception request:

  1. Visit the Policy Exception Center website to submit a policy exception request.
  2. Click on the Policy Exception Center tab located at the top of the screen.
  3. Click on I need to request an exception link located underneath the tabs in the top left corner.

For more information on the Policy Exception process, please read the Policy Exception Center Welcome information located on the Policy Exception Center home page.

Where can I get help?

Email Information Security, Policy and Compliance (ISPC) at

FAQs and other resources