User Baselines
Exceptions are the Rule!
As soon as you have a security plan, you may encounter a legitimate need for an exception, and we must accommodate these.
Make the Screen Green
Why Make Exceptions?
You do this when you have a deviation on a particular user and do not want to remediate it; instead, you want to set an exception.
Without exceptions, we are left with loads of reds on our baseline screen, which come from unremediated baselines for user accounts for which we need a different scenario.
User Baselines for Individual User Exceptions
For user exceptions, check out the next step below.