Attestation is a recorded statement by an accountable person that access, a control or a set of information is accurate and appropriate at a point in time. In IGA, an attestation commonly records a reviewer’s approval or revocation decision during certification.
Useful attestations identify exactly what was reviewed and preserve evidence of the decision, rationale and follow-up action.