Evidence Flows

workflow

Regulatory Compliance Attestation Cycle

Regulatory Compliance Attestation Cycle: runs on and enriches the existing Audit item created for this authority and reporting period (audit_type = compliance or regulatory_exam; scope = certification boundary; period_start/period_end = the reporting period) — that Audit item is the attestation record the cycle updates throughout, never a duplicate. Over the cycle: compile evidence for the authority source across the reporting period, validate and resolve evidence gaps, produce the five-section regulatory attestation package, route certifying-officer certification, and archive the package. In scope: the legal entities, products, geographies, and systems named in the certification boundary for that authority and period. Consumes the implemented, owned, control-mapped obligation baseline as the handoff package from the Regulatory Obligation Implementation workflow (the implementations themselves are the Control items whose framework multiselect includes this authority, linked to the anchor Audit). Out of scope: obligations under other authorities, entities outside the certification boundary, and the obligation-to-control implementation itself. Hands the certification outcome, exception register, action plans, and accepted risks off to Quarterly Board & Audit-Committee GRC Reporting.

In catalog since 2026-09-17T22:28:00Z · Last changed 2026-10-04T21:48:26Z (791ff2dd3a45)

Record JSON · Open in map · Data retrieval guide

Catalog revision: 791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4. A connection does not establish full coverage.

Attributes

domain
reg
department
compliance-legal
lineOfDefense
monitor

Details

teams
  • compliance-legal
  • executive
domains
  • reg
standards
  • gdpr
  • dora
  • nydfs-500
  • eu-ai-act
  • nis2
  • pci-dss
  • hipaa
  • ccpa
sourceTemplateId
workflow-library:reg-compliance-attestation-cycle
releaseId
sha256:442d5ec2e0681c96a5387a7d795fbfd68cf1fad8457f5f39a8bb1c029df3e7df
canonicalUrl
https://evidenceflows.com/workflows/all/?w=reg-compliance-attestation-cycle
capabilities
    mappingStatus
    mapped
    lineOfDefense
    monitor
    controls
    • UC-AUDIT-24
    • UC-GOV-24
    • UC-AUDIT-25
    roleIntegrity
    activityCount
    0
    ermPhases
      lineRoles
        serviceModes
          warnings

            Source

            No record-specific source URL is provided.

            Download workflow template · Release: sha256:442d5ec2e0681c96a5387a7d795fbfd68cf1fad8457f5f39a8bb1c029df3e7df

            Connections