Self-attestation is introduced when the industry complains that having a 3rd party verify is too onerous and could hurt business. And they're not wrong, but the

Self-attestation is introduced when the industry complains that having a 3rd party verify is too onerous and could hurt business. And they're not wrong, but the result is companies rubber stamp their own compliance. You see it a lot in DoD compliance now, for example.