What should you do if you cannot meet a time-bound action due to unforeseen constraints?

• A. Document the constraint with justification, implement best effort and compensating controls, and notify per incident reporting process.
• B. Ignore it.
• C. Wait until the next business day.
• D. Double the window without notification.

Answer: (A)

When a time-bound action can’t be met because of unforeseen constraints, the proper approach is to document the constraint with justification, make a best effort to comply, implement compensating controls to reduce risk, and notify through the incident reporting process. Documenting the constraint creates an auditable record of why the deadline wasn’t met and what factors prevented it. Making a best effort signals ongoing commitment to the objective, while compensating controls provide alternative safeguards to cover the gap and maintain reliability. Notifying according to the incident reporting process ensures the right people are informed, enabling coordination and proper oversight.

Ignoring the constraint or waiting until the next business day without telling anyone delays critical awareness and response. Doubling the window without notification bypasses established controls and communication channels, increasing risk and potential noncompliance.