Local Exception Management for Third-Party Assets

Introduction

SAFE’s Local Exception Management allows you to customize the digital footprint of a third party for your organization.

Outside-In third-party data is shared across SAFE customers. However, your organization may have additional context about a vendor, for example, an asset may be missing, incorrectly attributed, or need to be treated differently. Local exceptions let you make these adjustments for your organization only, without changing the vendor’s global attribution or what other SAFE customers see.

What is Local Exception Management?

Local Exception Management lets you override how specific third-party assets are represented and assessed in your SAFE environment.

You can perform four types of exceptions:

These changes are tenant-specific. The underlying global attribution and the experience of other SAFE customers remain unchanged.

Add an Asset

Use Add Assets when you know an asset belongs to a third party but it was not discovered by Outside-In.

1. Open the third party and navigate to Digital Footprint > Assets.

2. Click the + button to add assets.

3. Enter a unique Exception Name.

4. Add the required domains, IP addresses, or CIDR ranges manually, or upload a supported file.

5. Click the create button to add assets.

6. Once submitted, the exception appears with a Processing status.

Remove an Asset

Use Remove Assets when an asset has been attributed to a third party but does not belong to them.

1. Navigate to the third party’s Assets page.

2. Select one or more assets.

3. Click the three-dot option and select Remove Assets.

4. For an individual asset, you can also use the row-level menu and select Remove Asset.

5. Enter an exception name, reason, and a rationale.

6. Confirm the request.

7. After the exception is applied, the selected assets and their findings are removed from your view and no longer contribute to your score.

Move Assets to Confirmed or Unconfirmed

Use this option when you want to control whether an asset’s findings contribute to your assessment.

1. Open Digital Footprint > Assets and select the Confirmed or Unconfirmed tab.

2. Select the required assets.

3. From the three-dot options menu, select Move to Confirmed or Move to Unconfirmed.

4. Enter an exception name and, optionally, a rationale.

5. Confirm the request.

6. Move to Confirmed brings the asset into your assessment set so its findings become visible and contribute to your score. Move to Unconfirmed keeps the asset in your asset inventory while hiding its findings and excluding them from the score.

View and Manage Exception Requests

To review exceptions for a third party:

Digital Footprint > Assets > ⋮ > View Exceptions

The Exception Requests page displays each exception along with its name, ID, status, asset count, and creation date.

An exception can have the following statuses:

• Processing — The request is saved and waiting to be applied during a vendor refresh.

• Active — The exception has been applied and its changes are reflected in SAFE.

• Revoked — The exception has been withdrawn and is retained for historical reference.

From the Exception Requests page, you can also revoke an exception or remove specific assets from a multi-asset exception. Revoking an exception is irreversible.

When will my changes appear?

Exception requests are saved immediately but take effect after the vendor data is refreshed. While waiting, the request remains in Processing status. Once the updated data is available, the status changes to Active.

Once active, the exception is reflected across the relevant Outside-In experience—including the asset inventory, findings, scores, and exports—for your organization.