A security exception is a formal, approved authorization that allows an organization to deviate from its established security policies, standards, or controls.
It is granted when strict adherence to a rule is not technically feasible or would severely disrupt essential business operations. Security exceptions require infosec approval.