Exception Management is the third step in the security assessment of products used and developed by Visa. The first step is Security Assessment where a product goes through a battery of tests to see if they can be compromised creating "Findings". The second step is Finding Management where any findings are given an allotted amount of time to fix any and all items that could compromise Visa users. Exception Management comes in when the findings cannot be fixed for any reason in the allotted time period and the involved parties are requesting more time to remediate their findings.