We also have exceptions for any deviation from the policy that is reviewed and authorized by the head of the Information Security Group or the chairman of the Information Security Council or by individuals nominated by them.