Rule 36-3-1.8 - Exceptions to the State of Mississippi Cloud and Offsite Hosting Security Policy, Standards, Guidelines and RecommendationsA. The only permitted exceptions to the State of Mississippi Cloud and Offsite Hosting Security Policy are those that are approved in writing by ITS for an agency's specific purpose and are only applicable to that agency's operations for the duration of time defined by the exception. A detailed description of the policy and standards exception process is included in the Enterprise Security Program document. The Program document is available on the ITS website.B. Each agency must inquire with the vendor and appropriate agency staff to ascertain if design alternatives, configuration changes, or additional products or services are available to attain compliance prior to submitting a request for an exception.C. Prior to selecting and procuring information technology products and services, each agency must consider all enterprise policies and standards when specifying, scoping, and evaluating solutions to meet current and planned requirements. Miss. Code Ann. § 25-53-201.