How can I change the attestation of a control objective?

[Martin Vogl]

How can I change the attestation of a control objective. The control objective is active, related to a policy, has two related controls  (one retired, one draft). I am member of the compliance_admin group, but I am not able to change the attestation. Any Ideas?

[ronprice · Accepted solution]

Is the control objective linked to a policy?  If so, and the policy is approved (or at least beyond Draft state), the associated control objectives become read-only.

[Martin Vogl]

Hi Ron,

This is the answer! First I thought it may be open attestations, but you are right it is the policy.

Thanks a lot!

Martin

[Community Alums]

Hi @Martin Vogl ,

The Answer is Yes!! You can change the attestation of a control objective.

But you will have to keep in mind a few things, Provided the Controls are already created already for a respective control Objective ,once you change the Attestation in the control Objective level, it would create controls again but this time with the changed "Attestation" and all of those controls would be in Draft.

Mark my answer correct & Helpful, if Applicable.

Thanks,
Sandeep

[Srinivasulu Lag]

Hi @Martin Vogl ,

The attestation can be changed or removed from a control objective. After changing the attestation, OOB implementation is, it will only change the controls status back to Draft state and no new controls will be created.

For your information attestation can be changed for inactive control objectives as well.

Please Mark ✅ Correct/helpful, if applicable.

Thanks,

Srinivasulu Laggala