attestation
termgovernance & risksecurity
A statement by one party that something about another is true, made in a form somebody else is willing to rely on.
It is what a report, a certification and a signed software bill of materials all are, and the useful question is always the same three: who is asserting, what exactly did they check, and what happens if they were wrong. An attestation with a narrow scope and a named responsible party is worth more than a broad one nobody stands behind, which is why reading the scope section is the whole skill.
Also known as: assurance