How to handle compliance policy exceptions at work

Policy exceptions are where compliance work gets uncomfortable. The business side says the deal is important, the policy says no or not yet, and everyone wants the compliance person to "just approve this one." Most exceptions do not start as a scandal. They start as a rushed vendor, a missing document, a one-time workaround, or a manager saying the risk is low. I try to slow the request down…