GRCLibrary.ai

Standard

Emergency Authority Standard

An emergency lets a person, a system, or an AI agent exercise authority it would not ordinarily hold, to prevent or limit harm when the normal approval path is too slow. The corpus already carries domain-specific emergency paths (break-glass access, emergency change, emergency patch, crisis activation, incident containment, precautionary suspension), each with its own approver and its own after-the-fact review. What it does not carry is the general construct those paths share: what makes an emergency grant valid, how it is bounded, when it expires, what triggers an independent review of its continuation, and how its use is judged for proportionality after the fact.

Type
Standard
Version
0.0.3
Date
2026-08-31
Owner
GRC Programme Manager
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
Core Governance
Review frequency
Annual or as required by regulatory or framework change
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • 1. Purpose
  • 2. Applicability
  • 3. Relationship to other GRC documents
  • 4. Minimum requirements
  • 5. Evidence requirements
  • 6. Compliance notes
  • 7. Framework alignment
  • 8. Limitations

Frameworks it maps to

Related documents