Take attestation at control requirements level

The Take attestation at requirement level option enables administrators to perform compliance attestation at a granular level for individual control requirements within a control.

Before you begin

Role required: sn_compliance.admin, sn_compliance.manager, sn_compliance.user

Procedure

1. Navigate to All > Policy and Compliance > Compliance Workspace.
2. Select the List icon.
3. Under Compliance library, select Controls.
4. Select the control that contains the control requirements you want to attest.
5. In the Details tab, select Take Attestation at Requirement Level.
   The Attestation field will default to GRC CR Attestation.
6. In the Assign Respondent field, specify the user or role responsible for attestation (for example, System Administrator).
7. Select Attest.
8. Navigate to the Control requirements tab, and select each control requirement.
   Attestation tasks are generated for each control requirement under Assessment Instances.
9. For each assessment instance, select Take assessment.
   1. Select either Yes (implemented) or No (not implemented).
      • If yes, attach evidence and provide an explanation.
      • If no, provide a reason in the Explain field.
   2. Select Submit.
10. Review the following information for any failed assessment.
    • Generates an issue for that control requirement.
    • Marks the parent control as non-compliant.
    • Rolls up the same status to the entity and control objective level.