- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
a week ago
They seem to have same purpose that is providing evidence for particular control.
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
a week ago - last edited a week ago
Source of evidence | People (subjective response) | Data/system (objective, measurable) |
Use case | Formal confirmation, surveys, approvals | Continuous monitoring, automated evidence |
Trigger | Manual / scheduled campaign | Scheduled job or real-time metric |
Example | "Manager confirms access review complete" | "Report shows 10 users without review approval" |
✅Summary:
Attestation = human-driven, subjective confirmation.
Indicator = system/data-driven, objective measurement.
They complement each other: some controls require human attestation, while others can (and should) be monitored by indicators for continuous assurance.
Hope it helps!
Shashank Jain – Software Engineer | Turning issues into insights
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
a week ago
See if below link and PDF document helps,
https://www.servicenow.com/community/grc-forum/control-and-risk-indicators/m-p/1310558
If this helped to answer your query, please mark it helpful & accept the solution.
Thanks,
Bhuvan
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
a week ago
Did you get a chance to review this ?
If my response helped to answer your query, please mark it helpful & accept the solution.
Thanks,
Bhuvan
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
a week ago
Thanks for marking the post as helpful.
If this helped to guide you or answer your query, please accept the solution.
Thanks,
Bhuvan
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Saturday
Did you get a chance to review this ?
As per community guidelines, you can accept more than one answer as accepted solution. If my response helped to answer your query, please mark it helpful & accept the solution.
Thanks,
Bhuvan