Add Approve/Reject functionality after GRC Attestation submission and locate Yes/No compliance logic

[JawaharGunt]

Currently, in the GRC Attestation form:

• Clicking Take Assessment displays the form.
• Selecting Yes updates the control status as Compliant.
• Selecting No updates the status as Non-Compliant in the Control table and creates an issue in the Issue table.

I need help with:

1. Where is this Yes/No logic configured? (Business Rule, UI Action, Workflow?)
2. How can I add an Approve and Reject button after submission so that compliance status is finalized based on approval outcome?

Any guidance on best practices or steps to implement this would be appreciated.