Site attestation policy is now generally available

Introduction

Empower your organization with proactive governance. The new site attestation policy ensures that site owners regularly validate critical details like ownership, membership, and sharing settings. By automating periodic reviews and enforcement actions, this policy helps reduce compliance risks, prevent oversharing, and maintain a secure, well-governed SharePoint Online experience.

When this will happen

This feature is now generally available to all customers.

How this will affect your organization

• Who is affected: SharePoint administrators and site owners.
• What will happen:
  • SharePoint admins can enable site attestation policy in the SharePoint Admin Center.
  • Site owners will receive periodic prompts to confirm site details such as ownership, membership, and sharing settings.
  • Enforcement actions (such as restricting access or archiving) can be configured if attestations are not completed.
  • The feature is off by default and requires admin configuration.

What you can do to prepare

• Notify your SharePoint administrators about the new policy.
• Update internal documentation and workflows to account for this capability.
• Review governance policies and determine enforcement actions for non-compliance.

Learn more: Request recurring site attestations for SharePoint sites

Compliance considerations

No compliance considerations identified, review as appropriate for your organization.