Attest a control

Attestations are surveys that gather evidence to prove that a control is implemented. If the control attestation and respondents fields are selected, when the control moves from the Draft state to the Attest state, a notification is sent to the attestation respondents.

Before you begin

Role required: sn_grc.business_user, sn_grc.business_user_lite

Users can create multiple attestation types and set their control objectives to different attestations. A sample attestation called GRC Attestation is also provided as the default attestation.

About this task

When controls are attested, a new questionnaire is created. As a result, attestations do not appear in the Self-Service > My assessments & surveys module. Hundreds of GRC assessment records could be generated at once and should be separated from other assessments in a separate list view.

Procedure

1. Navigate to Policy and Compliance > Controls > My Attestations.
2. Open the attestation and review the details.

   Option	Description
   If you are unable to answer the questions	Reassign the attestation to another user in the Assigned to field. Click Update and close the record. Note: Only a user with the sn_grc.user role can be re-assigned the attestation. The list of attestations refreshes when you reassign an attestation to another user.
   If you are able to answer the questions	Click Take attestation. Answer the questions and attach information, as required. Click Submit. The list of attestations refreshes when you close the Take Assessment pop-up window.