Attestation Requests and Processes

To allow individuals within an organization to verify the accuracy of corporate data, a user makes an attestation request. This request in turn initiates one or more workflow processes. The workflow processes give the attesters an opportunity to attest to the correctness of the data. A separate workflow process is initiated for each attester. An attester is assigned a workflow task in the Task Notifications list on the Work Dashboard tab. To complete the workflow process, the attester opens the task, reviews the data, and attests that it is correct or incorrect.

The Roles Based Provisioning Module supports four types of attestation:

In the case of a user profile attestation process, each user must be the attester for his/her own profile; no other individual can be the attester. In the case of SoD violation, role assignment, and user assignment attestation, the attester may be any user, group, or role. The initiator for the attestation request specifies whether every member or only a single member must attest for a group or role. In the case of a user attestation process, every member must attest for a selected group or role.

To simplify the process of making attestation requests, the Roles Based Provisioning Module installs a set of default request definitions, one for each attestation type:

You can use these request definitions as the basis for making your own requests. Once you’ve provided the details for a new request, you can save these details for future use.

Attestation Forms

Each workflow has an attestation form associated with it. The attester must review the form and fill it in to affirm the correctness of the data. The form is usually defined by the Compliance Administrator.

Each attestation form contains a required attestation question along with a set of optional survey questions. The attestation question is a yes or no question attesting to or denying the overall data. Survey questions can be set up to gather additional data or ask qualifying questions.

The user profile attestation form also include a set of user attributes with values that the attester must review. The attestation form for an SoD violation, role assignment, or user assignment process includes an attestation report.

Attestation Reports

The attestation report for an SoD violation, role assignment, or a user assignment process provides detailed information that the attester is expected to review. The report is generated at the time the attestation process is initiated to ensure that all users are reviewing the same information. The report may be generated in several languages, depending on the report languages settings specified for the attestation process.

Attestation Request Status

Once an attestation request has been initiated, it can be easily tracked throughout its lifecycle. The User Application provides a convenient way to look at the status of the request as a whole, as well as the detailed status for each individual workflow process associated with the request. The high-level status for a request gives the user a way to see whether the request is running, completed, initializing, or in error. The detailed status provides information about the number of workflow processes, and the status for each workflow. In addition, it shows the attestation results, which indicate how many answers to the attestation question were affirmative and how many were negative. The attestation results also show which attesters have not taken any action on their assigned workflow tasks.

Compliance Security

The Compliance tab recognizes a single administrator role called the Compliance Administrator. A Compliance Administrator is designated at installation time. After installation, additional users can be assigned to the Compliance Administrator role. To make additional assignments, you need to use the RBPM Provisioning and Security > Administrator Assignments page in the User Application.

The Compliance Administrator role is described in detail below:

The Compliance tab does not allow access by authenticated users that do not have membership in the Compliance Administrator role listed above.