workflow
Regulatory Compliance Attestation Cycle
Regulatory Compliance Attestation Cycle: runs on and enriches the existing Audit item created for this authority and reporting period (audit_type = compliance or regulatory_exam; scope = certification boundary; period_start/period_end = the reporting period) — that Audit item is the attestation record the cycle updates throughout, never a duplicate. Over the cycle: compile evidence for the authority source across the reporting period, validate and resolve evidence gaps, produce the five-section regulatory attestation package, route certifying-officer certification, and archive the package. In scope: the legal entities, products, geographies, and systems named in the certification boundary for that authority and period. Consumes the implemented, owned, control-mapped obligation baseline as the handoff package from the Regulatory Obligation Implementation workflow (the implementations themselves are the Control items whose framework multiselect includes this authority, linked to the anchor Audit). Out of scope: obligations under other authorities, entities outside the certification boundary, and the obligation-to-control implementation itself. Hands the certification outcome, exception register, action plans, and accepted risks off to Quarterly Board & Audit-Committee GRC Reporting.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- reg
- department
- compliance-legal
- lineOfDefense
- monitor
Details
- teams
- compliance-legal
- executive
- domains
- reg
- standards
- gdpr
- dora
- nydfs-500
- eu-ai-act
- nis2
- pci-dss
- hipaa
- ccpa
- sourceTemplateId
- workflow-library:reg-compliance-attestation-cycle
- releaseId
- sha256:ec89107ef3b241534c7ed1153a3b71287baa28fce8a8fba6b41647569cd08291
- canonicalUrl
- https://workflow-library.com/all/?w=reg-compliance-attestation-cycle
- capabilities
- mappingStatus
- mapped
- lineOfDefense
- monitor
- controls
- UC-AUDIT-24
- UC-GOV-24
- UC-AUDIT-25
- roleIntegrity
- activityCount
- 0
- ermPhases
- lineRoles
- serviceModes
- warnings
Source
No record-specific source URL is provided.
Download workflow template · Release: sha256:ec89107ef3b241534c7ed1153a3b71287baa28fce8a8fba6b41647569cd08291
Connections
- Regulatory Compliance Attestation Cycle oversees UC-AUDIT-25 — Maintain quality records and information for internal control
- Regulatory Compliance Attestation Cycle oversees UC-AUDIT-24 — Manage compliance with external legal and regulatory requirements
- Regulatory Compliance Attestation Cycle oversees UC-GOV-24 — Notify regulators of incidents and file required certifications