Hello Declan, since at control objective level we dont do attestation, you may want to link it to an entity which would generate a control, this would further allow you to do attestations. Also it would give additional details like "discussion" for Rev 5 or "supplemental guidance" for Rev 4 pre populated based on the NIST content. You can update it based on your organisationally defined parameters at the control objective level.
