Security Exemption Manager

Description

Security Exemption Manager is an internal Web-based application that enables UAMS employees to submit requests to exempt Microsoft Windows devices from the automated security patches that are pushed by IT Security each month. Exemptions may be requested for devices whose operation cannot be interrupted for automatic updates, such as devices used to treat patients or which involve testing or research. The process this site supports begins with a request that describes one or more devices and explains the rationale for seeking the exemption. From there, the requester's manager, Chief Information Security Office and IT Security have opportunities to review, approve or deny each request or ask the requester for more information. Automated emails drive the process, and each approver or approving group has access to a request queue that includes the status of any pending requests.