Attestation

An attestation is a formal declaration by a vendor confirming that specific security controls are in place. Attestations are a standard component of questionnaire-based assessments but are self-reported, unlike outside-in technical ratings, which are independently observed.