Create or Edit an Attestation

Use Attestations to ensure Control records are compliant and demonstrate/ensure they are reviewed on a regular basis. By applying an Attestation, you are documenting that a Control has been implemented, how it has been implemented, and why.

To create or edit an Attestation, you must log in to Neurons for ITSM as a GRC Manager.

You can create or edit an Attestation for a Control only when the Control record's Status is Draft, In Review or Active. An Attestation record is closed and cannot be edited when the associated Control record's Status is set to Retired.

To create an Attestation:

1.Open the Controls workspace.

2. Open the Control record you want to attest.

3.Click Attest on the top row of the Control record.
A blank GRC Attestation record form opens.

4.Enter the attestation data in the form fields:

•Is the Control implemented: Select Yes if the Contol is implemented, or select No if it has not been implemented.

•Details: Enter details to confirm the Control is still valid, is used/not used, and is or is not compliant. You can also enter any supporting evidence.

•Date: Add a date for completion of the Attestation.

5.Click Save.

To edit an Attestation:

You cannot edit an Attestation when the associated Control record's Status is set to Retired.

1. Open the Control record that the Attestation is associated with.

2.Click the Attestations tab.

3.Select the Attestation in the list, and double-click the entry.
The Attestation record opens.

4.Edit the fields as required,

5.Click Save.