History

Priority

must

Nov 2018

Removed

Removed due to a change from a compliance culture to a risk management culture.

2017

System owners seeking approval for non-compliance with any control in this manual must begranted non-compliance from their accreditation authority.

2015

System owners seeking approval for non–compliance with any control in this manual must begranted non–compliance from their accreditation authority.

2010

System owners seeking a dispensation for non-compliance with any control with a ‘should’ or ‘should not’compliance requirement must be granted the dispensation from their accreditation authority.