Abstract: Persistent storage may contain definitions of: configuration items (CIs) each having attributes that characterize a respective hardware or software component, a list of data sources used to update at least some of the CIs, and an auto-attestation time period; and one or more processors configured to: identify a plurality of the CIs for auto-attestation; for each respective CI, determine a respective condition of whether: (i) a data-source attribute of the respective CI indicates that it was updated by a trusted data source, and (ii) a most-recent-update attribute of the respective CI indicates that it was updated within the auto-attestation time period; and mark each respective CI based on its respective condition, wherein the respective CI is marked as auto-attested when its respective condition is true, and wherein the respective CI is marked as not auto-attested when its respective condition is false.