anchor: Such deviations were required to be documented in a letter and, though not required, were usually approved by the central security group.
positive: Deviations should be documented in a letter.
negative: Deviations aren't allowed to be approved by the security group.