Control Attestation outcome - required help

[ImranHasan]

In ServiceNow IRM, if we have a control and want to perform an attestation with a control owner, the current outcome we receive based on their inputs is either 'Compliant' or 'Non-Compliant.' I was wondering how I can change the outcome to 'Effective,' 'Partially Effective,' 'Ineffective,' or 'Not Assessed' based on the control owner's inputs.

[ImranHasan]

Understood, just wondering do we have any solution to solve this complex problem.

[Prasanna_Patil]

Hi @ImranHasan ideally attestation is best suited for

Confirming something exists or is in place (e.g., "Yes, we completed the activity.")

Verifying compliance (e.g., "Yes, the control was followed.")

Hence if you want to get the effective, ineffective or not attested its better to to with "control testing" may be, which help in Assessing performance and design effectiveness of controls.