Management override of existing policies and proceduresControlLog of all management overrides is maintained and reviewed