Hi.

Control attestation:

you confirm that there is something to check compliance, e.g. : there is a control implemented to check if your fridge got the right temperature: Thermometer is implemented.

This is the „attest“ state.

After review you are in „monitor“ state to check if the temperature is within the correct parameters with help of your indicators and indicator tasks.

this can be done manually, with data from instance or scripted.

another thing is audit, where for example an auditor checks if the control and indicator are sufficient. 

it is NOT „manually“ (attest) or „automatically“ (indicator) as other people said.