Could you please help on this?
We have a common control which owned by a Function, added reliant entity as "Internet facing application". Assume 100 entities added.
Not the Function entity owner (who is attestation respondent) perform attestation and based upon the assessment the outcome is Control is effective.
Now how the other 100 entity owner acknowledge this? as per regulations the entity owners should assess the control.
To avoid 100 controls we using common control but how this will be resolved?
