Attestation
Attestation is the formal process by which an individual confirms that they have read, understood, and will comply with a policy, procedure, or compliance requirement. It provides documented evidence that governance expectations have been communicated to and acknowledged by the relevant parties.
Attestation is a critical component of policy governance and compliance management. It transforms a policy from a document into a confirmed commitment. Attestation campaigns distribute policies to relevant audiences, track who has acknowledged them, and follow up with non-respondents. The resulting audit trail demonstrates to regulators and auditors that the organization has actively communicated its policies — not merely published them. Failure to attain high attestation rates is itself a governance finding.
Examples
- •Annual code of conduct attestation where all employees confirm they have read and will comply with the code.
- •Policy attestation campaign where employees in handling personal data acknowledge the data protection policy.
- •Compliance certification where business unit leaders attest that their operations comply with applicable regulations.
