What is attestation?

Attestation is a critical internal control process where authorized individuals approve and confirm that vouchers, invoices, and other accounting documents are correct, legal, and in accordance with company policies before they are posted. Attestation ensures that all financial transactions are documented, approved, and traceable. Effective attestation requires systematic receipt of vouchers as the basis for correct document management.

What is Attestation?

Attestation is a formal approval process that involves an authorized person confirming that:

• The voucher is genuine and correct.
• The transaction is commercially justified
• The amount is consistent with agreements and contracts
• All necessary documents are attached
• The transaction is in accordance with budget and authorizations.

Legal Basis

Attestation is rooted in the Norwegian Bookkeeping Act and the Norwegian Accounting Act , which require that all accounting documents be documented and traceable. Companies must be able to demonstrate a clear chain of approval for all financial transactions.

Certification as Internal Control

Attestation serves as an internal control tool that protects the company from:

• Financial crime and fraud
• Misregistrations and accounting errors
• Unauthorized payments
• Lack of documentation

When deviations are detected in the certification process, it is important to have established routines for deviation management that ensure systematic identification, analysis and correction of the errors.

The four-eyes principle

Many companies follow the four-eyes principle , where at least two people must be involved in the approval process:

1. Orderer/Recipient - confirms delivery and quality
2. Certifier - approves payment and accounting

Roles and Responsibilities in the Certification Process

Certificates and Powers of Attorney

Companies must establish clear attestation rules that define:

Role	Certification limit	Responsibility
Department Head	Up to 50,000 kr	Operating expenses within budget
Finance Manager	Up to 200,000 NOK	All financial transactions
General Manager	Up to 500,000 NOK	Strategic investments
Board	Over 500,000 kr	Larger investments and loans

Division of responsibilities

The customer is responsible for:

• Ensuring that the product/service is delivered as agreed
• Check that the invoice matches the order
• Confirm that the delivery is in accordance with the contract

The attesting officer is responsible for:

• Verify that the transaction is within budget
• Verify that all necessary documents are available
• Ensure that the payment is in accordance with authorizations
• Approve posting to the correct account

Types of Certification

1. Invoice certificate

The most common form of certification concerns invoices and purchase receipts:

• Factual control - has the product/service been delivered?
• Accounting control - correct accounting and VAT treatment
• Financial control - within budget and authorizations?

2. Salary certificate

Special certification is required for salaries and personnel expenses:

• Checking timesheets
• Approval of overtime and additional pay
• Verification of absence and leave
• Certification of travel expenses

3. Bank certificate

For bank payments and transfers:

• Checking recipient information
• Verification of amount and currency
• Payment purpose approval
• Double signature protection for large amounts

Digital Attestation solutions

Modern businesses often use digital attestation systems that automate the process:

Advantages of Digital Attestation

• Automatic routing to the correct attestor
• Digital traceability and audit trail
• Faster processing of vouchers
• Reduced paper use and archiving
• Integrated with accounting system

Integration with Accounting System

Digital solutions can be integrated with:

• ERP systems for automatic accounting
• Bank integration for payment execution
• Archiving systems for document storage
• Reporting tool for follow-up

Best Practices for Attestation

Establishment of Certification Routines

1. Define clear mandates and attestation boundaries
2. Create written procedures for attestation
3. Implement the four-eyes principle where appropriate
4. Ensure regular training of attesting officers
5. Conduct periodic reviews of certification practices
6. Integrate certification into daily settlement routines

Documentation requirements

All certifications must be documented with:

• Certifier's signature or digital approval
• Date of certification
• Any comments or reservations
• Reference to underlying documents

Common Challenges and Solutions

Challenge 1: Lack of Competence

Problem: Attestors lack knowledge of accounting rules

Solution: * Regular training in accounting * Clear guidelines and checklists * Support from the finance department

Challenge 2: Time Pressure and Delays

Problem: Attestation delays payments and supplier relationships

Solution: * Digital attestation solutions * Clear deadlines for certification * Deputies in case of absence

Challenge 3: Lack of Traceability

Problem: Difficult to track who has certified what

Solution: * Digital attestation with automatic logging * Systematic archiving of certified vouchers * Regular audits of certification practices

Certification and Audit

Auditor's Control

The auditor will check that the company has:

• Established certification procedures that are followed consistently
• Sufficient documentation of all certifications
• Appropriate division of responsibilities and authorizations
• Effective internal control throughout the certification process

The auditor's assessment of the attestation processes is documented in working papers , which form the basis for the audit opinion on internal control.

Preparation for Audit

To be well prepared for an audit, the company should:

• Document all certification procedures
• Maintain complete archives of certified vouchers
• Conduct internal audits of attestation practices
• Ensure that all attesters understand their responsibilities and authorities

Certification in Various Business Types

Small Businesses

In smaller businesses, certification may be simpler, but just as important:

• The general manager often certifies all major expenses
• External accountant can assist with controls
• Simple digital solutions can streamline the process

Large Companies

Larger organizations require more complex attestation structures:

• Hierarchical multi-level authorizations
• Specialized attestators for various areas
• Advanced ERP systems with built-in attestation
• Dedicated internal control functions

The Future of Certification

Automation and AI

Technological developments affect certification processes:

• Automatic recognition of document types
• AI-based verification of document content
• Machine learning to identify anomalies
• Blockchain for immutable traceability

Regulatory Changes

New requirements may affect certification:

• Increased digitization of public reports
• Stricter requirements for internal control
• Standardization of certification processes
• Integrated solutions with Altinn

Conclusion

Attestation is a fundamental internal control process that ensures the correct and legal processing of all financial transactions. By establishing clear routines, using modern technology and securing competent personnel, companies can achieve:

• Reduced risk of errors and fraud
• Better financial control and overview
• Efficient processes that support business operations
• Assurance that the accounts are correct and audit-proof

Good attestation practices are not only a legal requirement, but a strategic advantage that contributes to better financial management and increased trust from stakeholders, investors and authorities.