Attestations

Attestations are formal acknowledgments that demonstrate compliance activities have been completed. Manage training records, policy acceptances, and signed declarations.

What Are Attestations?

Attestations provide evidence that:

• Personnel completed required training
• Policies were reviewed and accepted
• Procedures were followed
• Controls were verified

Attestation Types

Policy Acknowledgment

Confirmation that policies were read and understood:

• Security policy acceptance
• Acceptable use agreement
• Data handling procedures

Training Completion

Records of completed training:

• Security awareness training
• Role-specific training
• Compliance training modules

Control Verification

Confirmation that controls are operating:

• Review sign-off
• Testing completion
• Audit verification

Custom Attestation

Organization-specific attestations:

• Management assertions
• Exception approvals
• Incident acknowledgments

Creating Attestations

Attestation Templates

Create reusable templates:

1. Go to Evidence > Attestations
2. Click Create Template
3. Configure:
   • Title and description
   • Attestation text
   • Required acknowledgment
   • Linked controls
4. Save template

Template Options

Collecting Attestations

Request Attestation

Send attestation requests:

1. Select template
2. Click Request Attestation
3. Add recipients (individuals or groups)
4. Set due date
5. Add message
6. Send request

Recipient Experience

When users receive a request:

1. Email notification with link
2. Open attestation form
3. Review statement
4. Provide acknowledgment
5. Submit attestation

Bulk Requests

Request from many users:

1. Select template
2. Click Bulk Request
3. Upload CSV of recipients or select group
4. Configure options
5. Send all requests

Managing Attestations

Attestation Dashboard

View attestation status:

• Pending requests
• Completed attestations
• Overdue items
• Expiring soon

Tracking Completion

Monitor request progress:

Reminders

Send reminders for pending requests:

1. Select pending attestations
2. Click Send Reminder
3. Customize message
4. Send reminders

Auto-reminders can be configured:

• 7 days before due
• 1 day before due
• Day of due date

Attestation Evidence

As Compliance Evidence

Completed attestations serve as evidence:

• Auto-linked to configured controls
• Appear in evidence collection
• Included in compliance reports

Attestation Records

Each completed attestation records:

• Who attested
• When they attested
• What they acknowledged
• IP address (optional)
• Browser/device info (optional)

Expiration and Renewal

Attestation Validity

Set how long attestations remain valid:

Expiration Notifications

Notify when attestations expire:

• 30 days before
• 7 days before
• On expiration

Renewal Requests

Automatically request renewal:

1. Enable auto-renewal on template
2. Set renewal timing (days before expiration)
3. System sends new request automatically

Reporting

Attestation Reports

Generate attestation reports:

1. Go to Evidence > Attestations
2. Click Generate Report
3. Select scope:
   • All attestations
   • Specific template
   • Specific users
4. Download report

Report Contents

Compliance Dashboard

View attestation metrics:

• Completion rate by template
• Overdue percentage
• Trend over time
• Department breakdown

Best Practices

Template Design

Create effective templates:

• Clear, specific language
• Appropriate length
• Relevant to the control
• Easy to understand

Request Timing

Send requests strategically:

• Start of employment
• After policy updates
• Before audits
• Annual renewal cycle

Follow-Up

Ensure completion:

• Monitor dashboards
• Send timely reminders
• Escalate overdue items
• Report completion rates

Integration

HR Systems

Integrate with HR for:

• New hire onboarding
• Role changes
• Terminations

Training Systems

Connect to LMS for:

• Training completion records
• Automatic attestation triggers
• Compliance tracking

Troubleshooting

Requests Not Received

If users don't receive requests:

• Check email addresses
• Review spam filters
• Verify user access

Cannot Complete Attestation

If users can't submit:

• Check link validity
• Verify user authentication
• Review browser compatibility

Missing Attestations

If completed attestations don't appear:

• Check submission confirmation
• Verify user identity
• Contact support

What's Next?

• Evidence Artifacts - Manage evidence files
• Evidence Bundles - Package for audits
• Evidence Gaps - Review coverage