workflow

Regulatory Compliance Attestation Cycle

Regulatory Compliance Attestation Cycle: runs on and enriches the existing Audit item created for this authority and reporting period (audit_type = compliance or regulatory_exam; scope = certification boundary; period_start/period_end = the reporting period) — that Audit item is the attestation record the cycle updates throughout, never a duplicate. Over the cycle: compile evidence for the authority source across the reporting period, validate and resolve evidence gaps, produce the five-section regulatory attestation package, route certifying-officer certification, and archive the package. In scope: the legal entities, products, geographies, and systems named in the certification boundary for that authority and period. Consumes the implemented, owned, control-mapped obligation baseline as the handoff package from the Regulatory Obligation Implementation workflow (the implementations themselves are the Control items whose framework multiselect includes this authority, linked to the anchor Audit). Out of scope: obligations under other authorities, entities outside the certification boundary, and the obligation-to-control implementation itself. Hands the certification outcome, exception register, action plans, and accepted risks off to Quarterly Board & Audit-Committee GRC Reporting.

Record JSON · Open in map · Data retrieval guide

Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.

Attributes

domain
reg
department
compliance-legal
lineOfDefense
monitor

Details

teams
  • compliance-legal
  • executive
domains
  • reg
standards
  • gdpr
  • dora
  • nydfs-500
  • eu-ai-act
  • nis2
  • pci-dss
  • hipaa
  • ccpa
sourceTemplateId
workflow-library:reg-compliance-attestation-cycle
releaseId
sha256:ec89107ef3b241534c7ed1153a3b71287baa28fce8a8fba6b41647569cd08291
canonicalUrl
https://workflow-library.com/all/?w=reg-compliance-attestation-cycle
capabilities
    mappingStatus
    mapped
    lineOfDefense
    monitor
    controls
    • UC-AUDIT-24
    • UC-GOV-24
    • UC-AUDIT-25
    roleIntegrity
    activityCount
    0
    ermPhases
      lineRoles
        serviceModes
          warnings

            Source

            No record-specific source URL is provided.

            Download workflow template · Release: sha256:ec89107ef3b241534c7ed1153a3b71287baa28fce8a8fba6b41647569cd08291

            Connections