AssureSwarm

workflow

Regulatory Compliance Attestation Cycle

Regulatory Compliance Attestation Cycle: runs on and enriches the existing Audit item created for this authority and reporting period (audit_type = compliance or regulatory_exam; scope = certification boundary; period_start/period_end = the reporting period) — that Audit item is the attestation record the cycle updates throughout, never a duplicate. Over the cycle: compile evidence for the authority source across the reporting period, validate and resolve evidence gaps, produce the five-section regulatory attestation package, route certifying-officer certification, and archive the package. In scope: the legal entities, products, geographies, and systems named in the certification boundary for that authority and period. Consumes the implemented, owned, control-mapped obligation baseline as the handoff package from the Regulatory Obligation Implementation workflow (the implementations themselves are the Control items whose framework multiselect includes this authority, linked to the anchor Audit). Out of scope: obligations under other authorities, entities outside the certification boundary, and the obligation-to-control implementation itself. Hands the certification outcome, exception register, action plans, and accepted risks off to Quarterly Board & Audit-Committee GRC Reporting.

Record JSON · Open in map · Data retrieval guide

Catalog revision: f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e. A connection does not establish full coverage.

Attributes

domain
reg
department
compliance-legal
lineOfDefense
monitor

Details

teams
  • compliance-legal
  • executive
domains
  • reg
standards
  • gdpr
  • dora
  • nydfs-500
  • eu-ai-act
  • nis2
  • pci-dss
  • hipaa
  • ccpa
sourceTemplateId
workflow-library:reg-compliance-attestation-cycle
releaseId
sha256:3d0fb41031dc3afbdbfc4c25c56ffdd18b9557f15f7b57373dc511f0f300dce1
canonicalUrl
https://assureswarm.com/workflows/all/?w=reg-compliance-attestation-cycle
capabilities
    mappingStatus
    mapped
    lineOfDefense
    monitor
    controls
    • UC-AUDIT-24
    • UC-GOV-24
    • UC-AUDIT-25
    roleIntegrity
    activityCount
    0
    ermPhases
      lineRoles
        serviceModes
          warnings

            Source

            No record-specific source URL is provided.

            Download workflow template · Release: sha256:3d0fb41031dc3afbdbfc4c25c56ffdd18b9557f15f7b57373dc511f0f300dce1

            Connections