What is Attestation? (Part 1 of 3)

Attestation describes any certification review process where an individual swears to or witness/confirm something important. This term is almost universally used to describe a review/certification process that requires resource owners to verify their authorized users during on an on-going basis. This on-going process

Attestation usually provides an organization with a  measure of protection from liability and the risks associated with the failure of the resource owner to control access the his or her resource so that to comply with legal or regulatory requirements. (See http://en.wiktionary.org/wiki/attestation) 

Three Typical Statements Required for Attestation:

There are three basic tenants that most compliance auditors deem as necessary and in fact the following three statements are actually from a SOX compliance statement.

1. I am the individual who makes the authorization decision for the specific resource(s).

2. These individuals and/ or groups are authorized to use the intended resource(s).

3. I understand which resource(s) I have authorized these individuals to access.

Read Part 2 of 3 here http://www.bobbobel.com/what-makes-attestation-difficult-2-of-3/