Evidence workflows
Record and revoke sign-offs
Create an attributable statement for a control and preserve its history when an attestation needs to be withdrawn.
Record a sign-off
- Open the control's sign-off requirement.
- Read the current statement and confirm the scope and period.
- Add the requested supporting context.
- Submit only if you are authorized to make that statement.
A sign-off records the signed-in actor. It is an attestation, not an electronic signature service or independent audit opinion.
Correct a statement
Revoke an incorrect or superseded sign-off and record the reason. Create a new sign-off for the corrected statement. The original record remains part of the history.
If an administrator changes the sign-off wording, review the current requirement before signing again. Do not reuse an earlier approval as evidence for a materially different statement.