question Re: How can I change the attestation of a control objective? in GRC forum

How can I change the attestation of a control objective?

Martin Vogl — Thu, 21 Jul 2022 14:53:01 GMT

How can I change the attestation of a control objective. The control objective is active, related to a policy, has two related controls (one retired, one draft). I am member of the compliance_admin group, but I am not able to change the attestation. Any Ideas?

Re: How can I change the attestation of a control objective?

ronprice — Thu, 21 Jul 2022 15:31:45 GMT

Is the control objective linked to a policy? If so, and the policy is approved (or at least beyond Draft state), the associated control objectives become read-only.

Re: How can I change the attestation of a control objective?

Community Alums — Fri, 22 Jul 2022 05:36:37 GMT

Hi @Martin Vogl ,

The Answer is Yes!! You can change the attestation of a control objective.

But you will have to keep in mind a few things, Provided the Controls are already created already for a respective control Objective ,once you change the Attestation in the control Objective level, it would create controls again but this time with the changed "Attestation" and all of those controls would be in Draft.

Mark my answer correct & Helpful, if Applicable.

Thanks,
Sandeep

Re: How can I change the attestation of a control objective?

Srinivasulu Lag — Fri, 22 Jul 2022 20:04:49 GMT

Hi @Martin Vogl ,

The attestation can be changed or removed from a control objective. After changing the attestation, OOB implementation is, it will only change the controls status back to Draft state and no new controls will be created.

For your information attestation can be changed for inactive control objectives as well.

Please Mark ✅ Correct/helpful, if applicable.

Thanks,

Srinivasulu Laggala

Re: How can I change the attestation of a control objective?

Martin Vogl — Mon, 25 Jul 2022 08:01:00 GMT

Hi Ron,

This is the answer! First I thought it may be open attestations, but you are right it is the policy.

Thanks a lot!

Martin