Which state represents formal attestation of controls?

Which state represents formal attestation of controls?

• A. Draft
• B. Monitor
• C. Attest
• D. Review

Answer: (C)

Formal attestation of controls is the act of a designated authority giving formal sign-off that the controls are in place and operating effectively for a defined period, backed by evidence from testing or evaluation. This state indicates official recognition that the control has passed required checks and is approved to operate as intended. Draft is simply the initial version that hasn’t been approved yet. Monitor refers to ongoing observation to detect changes or issues, not a formal sign-off. Review involves evaluating the control, but without the formal attestation that certifies it as effectively operating. Attest uniquely embodies the formal sign-off, with the necessary evidence and authorization to confirm control effectiveness.

Formal attestation of controls is the act of a designated authority giving formal sign-off that the controls are in place and operating effectively for a defined period, backed by evidence from testing or evaluation. This state indicates official recognition that the control has passed required checks and is approved to operate as intended.

Draft is simply the initial version that hasn’t been approved yet. Monitor refers to ongoing observation to detect changes or issues, not a formal sign-off. Review involves evaluating the control, but without the formal attestation that certifies it as effectively operating. Attest uniquely embodies the formal sign-off, with the necessary evidence and authorization to confirm control effectiveness.