How can I change the attestation of a control objective?

Martin Vogl
Tera Contributor

How can I change the attestation of a control objective. The control objective is active, related to a policy, has two related controls  (one retired, one draft). I am member of the compliance_admin group, but I am not able to change the attestation. Any Ideas?

1 ACCEPTED SOLUTION

ronprice
Giga Guru

Is the control objective linked to a policy?  If so, and the policy is approved (or at least beyond Draft state), the associated control objectives become read-only.

View solution in original post

4 REPLIES 4

ronprice
Giga Guru

Is the control objective linked to a policy?  If so, and the policy is approved (or at least beyond Draft state), the associated control objectives become read-only.

Hi Ron,

This is the answer! First I thought it may be open attestations, but you are right it is the policy.

Thanks a lot!

Martin

Community Alums
Not applicable

Hi @Martin Vogl ,

The Answer is Yes!! You can change the attestation of a control objective.

But you will have to keep in mind a few things, Provided the Controls are already created already for a respective control Objective ,once you change the Attestation in the control Objective level, it would create controls again but this time with the changed "Attestation" and all of those controls would be in Draft.

Mark my answer correct & Helpful, if Applicable.

Thanks,
Sandeep

Srinivasulu Lag
ServiceNow Employee
ServiceNow Employee

Hi @Martin Vogl ,

The attestation can be changed or removed from a control objective. After changing the attestation, OOB implementation is, it will only change the controls status back to Draft state and no new controls will be created.

For your information attestation can be changed for inactive control objectives as well.

Please Mark Correct/helpful, if applicable.

Thanks,

Srinivasulu Laggala