Can an attestation be signed electronically?

Yes. Electronic signatures are legally binding under the ESIGN Act (15 U.S.C. ch. 96) and UETA in most states; ensure intent, consent, attribution, and record retention are documented to meet the four-part ESIGN test.

Who is the proper signatory?

An authorized HR, security, or compliance officer should sign. The signatory should have authority to represent the organization and access supporting evidence for verification.

Is notarization required?

Not typically for internal attestations, but some vendors or contracts may request notarization or RON; verify state-specific rules and contractual obligations before notarizing.

What supporting documents should accompany it?

Attach background-check summaries, training completion records, access review exports, and policy references to substantiate each attested control item for auditors or relying parties.

How long must I keep the signed form?

Retain according to applicable rules: generally at least 3 years for financial records, 6 years for HIPAA-related items (45 CFR §164.530(j)), and longer if contractually required or litigation holds apply.

What if the attestation is found inaccurate?

Correct promptly, notify affected parties as required, and document remediation steps. Inaccurate attestations can lead to audit findings, contractual remedies, or regulatory penalties depending on the violation.

Electronic Signature
Templates
HR
HR Security Attestation Form

HR Security Attestation Form

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

HR SECURITY ATTESTATION FORM

Complete this Security Attestation Form to document understanding of and compliance with company information security obligations. Provide accurate information; false statements or omissions may result in disciplinary action, up to and including termination and potential legal consequences.

Personal Information

Full Legal Name Home Address Primary Phone Email Address

Position Information

Job Title Department Reporting Manager

Intended Start Date: Annual Salary (if applicable):

Employment History (Most Recent First)

Employer 1 — Company Name Position / Title

Dates Employed: From to

Primary Responsibilities Reason for Leaving

Employer 2 — Company Name Position / Title

Dates Employed: From to

Primary Responsibilities Reason for Leaving

Education

Highest Degree Institution

Graduation Date:

References (Professional)

Reference 1 — Name

Reference 2 — Name

Reference 3 — Name

Security Attestations and Authorizations

By checking each applicable box below, I attest to the statements and authorize the described actions. I understand that these attestations are conditions of continued employment or access to company systems.

I acknowledge receipt of, and agree to comply with, the company's Information Security and Acceptable Use policies, including protection of confidential and proprietary information.

I will protect my credentials, will not share passwords or access tokens, and will report suspected credential compromise immediately.

I will enroll in and maintain multi-factor authentication (MFA) on all accounts that require it. Date MFA enabled:

I will use company-approved devices and configurations for work-related activities and will not connect unauthorized devices to internal networks.

I have completed required security awareness training. Date completed:

I do not have any criminal conviction or pending criminal charge involving fraud, theft, embezzlement, or other offenses that would disqualify me from holding roles with privileged access. If yes, provide details below.

If you answered Yes to the previous item, explain

I authorize the company to conduct employment verification, references, criminal background checks, and other pre-employment or ongoing screenings required for security-sensitive positions.

I authorize the company to contact my previous employers and professional references to verify employment dates, duties, and suitability for access to sensitive information.

Disclosure of Foreign Contacts or Affiliations (if applicable)

Legal Notices, At-Will and Equal Opportunity

At-Will Employment: I understand that unless expressly provided otherwise in a signed written agreement, my employment is at-will and may be terminated by either party at any time, with or without cause or notice. Nothing in this form creates an employment contract for a specified term.

Equal Opportunity: The company is an equal opportunity employer. Employment decisions are made without regard to protected characteristics. Reasonable accommodation requests should be directed to Human Resources.

Applicant Certification and Acknowledgment

I certify that all information provided on this form is true, complete, and correct to the best of my knowledge. I understand that intentional misrepresentation, falsification, or omission of material facts may result in denial of employment, revocation of an offer, termination of employment, or other disciplinary action. I agree to notify the company promptly of any material changes to the information provided.

I understand that the company may monitor use of its information systems and networks and that I have no expectation of privacy with respect to activity on company-owned devices or accounts except as specifically provided by law or company policy. I consent to such monitoring to the extent permitted by law.

By signing below I acknowledge the attestations contained herein, authorize the described background and reference checks, and accept the security responsibilities associated with my role.

Printed Name:

Signature:

Date:

What the HR Security Attestation Form Is and When It Applies

An HR Security Attestation Form is a formal written statement completed by a human resources or security representative that confirms an organization’s personnel, processes, access controls, and data-handling practices meet specified security requirements. Typical uses include vendor onboarding, subcontractor access, facility access approvals, compliance attestations for regulated data (for example HIPAA or FERPA), and internal audits. The form documents controls such as background checks, least-privilege access, incident reporting, and training completion so relying parties can evaluate risk and maintain a records trail for audits.

Why an HR Security Attestation Form Matters

Completing an HR Security Attestation provides documented evidence that personnel and HR processes meet the security expectations of vendors, partners, and regulators. It reduces confusion about responsibilities, supports audit readiness, and documents the organization’s posture for access to sensitive systems or data.

Common Roles That Prepare or Rely on This Attestation

The form is typically prepared by HR, security, or compliance staff and is relied upon by vendors, auditors, and internal risk teams.

HR managers and directors responsible for background checks and policy enforcement.
Security/compliance officers who maintain training records, access logs, and incident procedures.
Vendors and procurement teams that require documented assurances before enabling access to systems or data.

Use it to show measurable assurance about personnel screening, access controls, and training when sharing sensitive data or granting system access.

Core Sections Typically Included in the Attestation

A professional HR Security Attestation organizes assertions into discrete control areas so reviewers can verify compliance quickly and consistently.

Personnel Screening

Details on background checks, frequency, scope (criminal, employment verification), and who is eligible for sensitive access; include policy references and effective dates.

Access Controls

Description of user provisioning, least-privilege assignments, periodic access reviews, and separation-of-duty practices tied to job roles.

Training & Awareness

Records confirming required security and privacy training completion, training cadence, refresher timelines, and methods for tracking completion.

Incident Response

Statement of procedures for reporting and escalating personnel-related security incidents, including notification timelines and responsible contacts.

Data Handling Rules

Attested procedures for classification, storage, transmission, and disposal of regulated or sensitive information including encryption and access limits.

Third-Party Access

Controls and approvals for vendor/subcontractor access, contract requirements, onboarding checklists, and audit rights.

Essential Information to Record on the Form

Organization Name: Full legal entity

Attestor Name: Full name and title

Effective Date: MM/DD/YYYY

Scope of Attestation: Systems or roles covered

Control References: Policy or standard IDs

Signature Block: Signatory name and date

Step-by-Step: How to Complete the HR Security Attestation Form

Follow a consistent order when filling the form: identify scope, confirm each control, attach supporting records, then sign and distribute.

01

Identify scope: List systems, departments, or roles covered by this attestation.
02

Verify controls: Confirm each control box and attach policy or evidence references.
03

Collect attachments: Add background checks, training records, and access review output.
04

Sign and date: Authorized HR or compliance officer signs and enters MM/DD/YYYY.

How to Configure an Online Attestation Workflow

Set up a digital workflow to route the form for approval, attach evidence, and capture secure signatures with an audit trail.

Field	Configuration
Authentication Method	Email link or SMS code; stronger auth for sensitive access
Routing Order	HR → Security → Legal or Compliance as required
Required Attachments	Training records, background checks, access lists
Retention Tagging	Assign retention policy and export format

Digital Signing and Platform Requirements

Choose a platform that supports secure storage, audit trails, and the authentication strength appropriate to the data being protected.

Authentication: Email, SMS, or stronger MFA
File Formats: PDF, DOCX supported
Integrations: Connectors for HRIS and cloud storage

Where to Send or File the Completed Attestation

After signing, route the completed attestation to internal records, requesting third parties, and retain an archival copy for audits.

Internal Archive: Store in the HR records system or secure document repository.
Recipient Submission: Send to the requesting vendor or procurement contact.
Compliance Team: Provide a copy to compliance or privacy officers for review.
Retention Repository: Export signed PDF and audit trail for long-term retention.

Typical Timelines and Deadlines for HR Security Attestations

Timelines vary by program; use these common triggers to schedule completion and evidence collection.

Vendor Onboarding Deadline:

Complete before granting any vendor access or sharing sensitive data.

Annual Re-Attestation:

Conduct at least annually or when personnel or access changes occur.

Role Change Trigger:

Require update within 30 days of role or privilege modifications.

Regulatory Audit Window:

Produce attestations on request within the audit timeline specified by the auditor.

Incident Response Update:

Re-attest controls after material security incidents or remediation.

Key Risks and Regulatory Consequences of Inaccurate Attestations

HIPAA Fines: Civil penalties possible (45 CFR §160.401)

I-9 Penalties: $281–$2,789 per violation (8 CFR §274a.2)

Contract Termination: Breach can lead to contract loss or damages

Audit Findings: Regulatory audits may produce formal findings

Reputational Harm: Public disclosure of control failures

Civil Liability: Potential third-party claims or indemnities

Pricing and Feature Snapshot for eSignature Providers

Comparative starting prices and key feature availability for common eSignature providers; signNow appears first per platform comparison guidelines.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies by plan	Varies by plan	Varies by plan	Varies by plan
Bulk Send	Available (Business Premium)	Available	Available	Available	Varies
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No
Envelope Cap	No cap	100 envelopes/user/year	Varies	Varies	Varies

Real-World Examples of HR Security Attestations in Use

These brief examples show why organizations rely on attestations during onboarding and audits.

Optica Ventures

Optica’s COO simplified vendor access reviews with a single attestation form signed by HR

Attestation enabled automated evidence collection
The team reported faster vendor approvals and clearer audit trails, reducing follow-up questions from partners and auditors while maintaining consistent control documentation.

Fertility Centers of Illinois

The founder centralized signature processes for HR and clinical access attestations

Used consistent forms across sites
Centralized attestations helped the organization demonstrate compliance during inspections, ensured training records were attached, and reduced administrative back-and-forth with external partners.

Frequently Asked Questions About HR Security Attestation Forms

Answers to common questions about execution, legal validity, evidence, and handling of HR Security Attestation Forms in the U.S.

Need help? Contact support

Can an attestation be signed electronically?
Yes. Electronic signatures are legally binding under the ESIGN Act (15 U.S.C. ch. 96) and UETA in most states; ensure intent, consent, attribution, and record retention are documented to meet the four-part ESIGN test.
Who is the proper signatory?
An authorized HR, security, or compliance officer should sign. The signatory should have authority to represent the organization and access supporting evidence for verification.
Is notarization required?
Not typically for internal attestations, but some vendors or contracts may request notarization or RON; verify state-specific rules and contractual obligations before notarizing.
What supporting documents should accompany it?
Attach background-check summaries, training completion records, access review exports, and policy references to substantiate each attested control item for auditors or relying parties.
How long must I keep the signed form?
Retain according to applicable rules: generally at least 3 years for financial records, 6 years for HIPAA-related items (45 CFR §164.530(j)), and longer if contractually required or litigation holds apply.
What if the attestation is found inaccurate?
Correct promptly, notify affected parties as required, and document remediation steps. Inaccurate attestations can lead to audit findings, contractual remedies, or regulatory penalties depending on the violation.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now