Send security exception expiry notices to affected staff before enforcement

Your security exception records often remain active past their expiry date, causing unintended access exposure and creating compliance gaps. Teams receive timely expiry notices so operations can reapply controls before the next compliance sweep.