Exemptions
Last updated on December 21, 2023Updated: December 21, 2023
Contact us for more information.
***NOTE: Contact email changed to: CITZAS@gov.bc.ca
How Does the Exemption Process work?
If you need an exemption to Information Security Policy, an IMIT Standard, or Chapter 12 of Core Policy, you have come to the right page. There are times when ministries find they are unable to comply with an IMIT Standard or Policy and need more time to come into compliance. In this case, an exemption needs to be requested.
Exemption Request Process
Before you submit an Exemption Request, carefully review the FAQ section to determine if an Exemption is required. If you are still unsure, please contact us.
Once you have determined that an Exemption Request is required, complete one or more of the following, as appropriate to your request:
- An approved Decision Note from the initiating Ministry to their MCIO for approval of the exemption - REQUIRED
- Statement of Acceptable Risk (SoAR) - REQUIRED
- Security Threat and Risk Assessment (STRA)
- Security Threat and Risk Assessment (STRA)
- Approval from your Ministry Information Security Officer (MISO)
and Ministry Chief Information Officer (MCIO)
- Privacy Impact Assessment (PIA)
- Complete the online form in the link below and submit