[Yandex Cloud documentation](../../../index.md) > [Yandex Security Deck](../../index.md) > [Step-by-step guides](../index.md) > [Threat Detector (TD)](index.md) > Managing exceptions to control rules

# Managing exceptions to the Threat Detector (TD) module's security rules

The Threat Detector module's security control [rules](../../concepts/threat-detector.md#rules) are used in the Security Deck [workspaces](../../concepts/workspace.md). If you have no workspaces yet, [create](../workspaces/create.md) one.

[Exceptions](../../concepts/threat-detector.md#exceptions) to the Threat Detector module's security control [rules](../../concepts/threat-detector.md#rules) allow you to flexibly configure when and for which objects the results of a rule check should be ignored.

## Viewing a list of exceptions {#view-exceptions-list}

To view the list of exceptions from the Threat Detector module's security control rules applicable to the [workspace](../../concepts/workspace.md):

{% list tabs group=instructions %}

- Security Deck UI {#cloud-sd}

  1. Go to [Yandex Security Deck](https://center.yandex.cloud/security/).
  1. In the left-hand panel, select ![file-text](../../../_assets/console-icons/file-text.svg) **Rules and exceptions**.
  1. At the top of the window, select the [workspace](../../concepts/workspace.md) for which you want to view the info on control rule exceptions.
  1. On the **Security control rules** page that opens, go to the **Exceptions** tab.

      The list of exceptions for the Threat Detector module rules is provided under **Threat Detector** and contains the following fields:

      * **Exception reason**: User-specified exception reason when creating the exception.
      * **Exception reason**: Action which the exception will trigger:

          * `Manually scanned`: If the conditions specified in the exception are met, the resource will generate rule compliance signals.
          * `No check required`: If the conditions specified in the exception are met, the resource will not generate rule compliance signals for the inspected resources.
      * **Rules**: Number of rules for which compliance checking is excluded. To view a detailed list of excluded rules, click the line with the exception.
      * **Created**: Information about the user who created the exception, as well as the date and time of creation.

{% endlist %}

## Creating an exception {#create-exception}

To create a new exception for the Threat Detector module's security control rules:

{% list tabs group=instructions %}

- Security Deck UI {#cloud-sd}

  1. Go to [Yandex Security Deck](https://center.yandex.cloud/security/).
  1. In the left-hand panel, select ![file-text](../../../_assets/console-icons/file-text.svg) **Rules and exceptions**.
  1. At the top of the window, select the [workspace](../../concepts/workspace.md) in which you want to create an exception from the control rules.
  1. On the **Security control rules** page that opens, go to the **Exceptions** tab.
  1. In the top-right corner, click **Create exception** ![chevron-down](../../../_assets/console-icons/chevron-down.svg) and select `Threat Detector`. In the window that opens:

      1. Under **Rules**, select the Threat Detector module rules for which the selected resources should not be checked:

          * `All rules`: To exclude the selected resources from the check for compliance with all the Threat Detector module rules.
          * `Selected rules`: To exclude the selected resources from the check for compliance with a given set of rules. To select rules whose compliance checks will be disabled based on the exception you are creating:

              * Click ![circle-plus](../../../_assets/console-icons/circle-plus.svg) **Select rules**.
              * In the window that opens, select the rules you want to exclude from compliance checks. If required, use the filter or search at the top of the window.
              * Click **Save selection**.
      1. Under **Scope**, specify the resources you want to exclude when checking the Threat Detector module rules:

          * `All workspace resources`: To exclude all resources controlled in the [workspace](../../concepts/workspace.md).
          * `Resources selected`: To exclude only some resources. To select resources excluded from the check:

              * Click ![circle-plus](../../../_assets/console-icons/circle-plus.svg) **Select resources**.
              * In the window that opens, select the resources to exclude from the rule and click **Apply**.
      1. Under **Reason for exclusion**, give in any format the reason why you are creating an exception.
      1. Click **Create exception**.

{% endlist %}

After the next infrastructure check is completed, the new exception will be displayed on the **Security control rules** page, on the **Exceptions** tab, under **Threat Detector**. The frequency of checks is 8 hours.

## Deleting an exception {#delete-exception}

To delete an exception for the Threat Detector module's security control rules:

{% list tabs group=instructions %}

- Security Deck UI {#cloud-sd}

  1. Go to [Yandex Security Deck](https://center.yandex.cloud/security/).
  1. In the left-hand panel, select ![file-text](../../../_assets/console-icons/file-text.svg) **Rules and exceptions**.
  1. At the top of the window, select the [workspace](../../concepts/workspace.md) in which you want to delete an exception from the control rules.
  1. On the **Security control rules** page that opens, go to the **Exceptions** tab.
  1. Under **Threat Detector**, in the row with the exception you want to delete, click ![ellipsis](../../../_assets/console-icons/ellipsis.svg) and select ![trash-bin](../../../_assets/console-icons/trash-bin.svg) **Delete**.

{% endlist %}

This exception will be deleted from the [environment](../../concepts/workspace.md), and the limitations it placed on rule compliance checks will be canceled after the next infrastructure scan is completed. The frequency of checks is 8 hours.

#### Useful links {#see-also}

* [Viewing Threat Detector (TD) security control rules](view-rules.md)
* [Threat Detector (TD)](../../concepts/threat-detector.md)
* [Security Deck workspaces](../../concepts/workspace.md)