Meridian Alpha
Internal Controls
Meridian Alpha · assurance records
Q3 2026 Unified Program Review · as of 9 Oct 2026
Q3 2026 Unified Program Review · as of 9 Oct 2026
Access & JML controls
6
Access Control · Joiner/Mover/Leaver
Open findings
2
0 high severity
Q3 test exceptions
2
0 with observation · 5 tested
Open actions
2
linked to these findings
Validations pending
2
0 failed
Controls tested by audit cycle
Control risk level by current test result
Fail
Pass with observation
Pass
High risk
Medium risk
Low risk
Click a cell to list its controls. Risk level is the control's recorded rating; result is the current-period test.
Open findings by application
Open findings by control domain
Access & JML findings
| Control | Observation | Domain | Severity | Owner | Target | Action | Validation |
|---|---|---|---|---|---|---|---|
| ACC-03 | Standing privileged access in production AWS | Access Control | Medium | Rahul Nair | 16 Oct 2026 | In Progress | Pending |
| JML-02 | Mover access not removed timely (deviation in CC6.2 testing) | Joiner/Mover/Leaver | Medium | Neha Iyer | 31 Oct 2026 | Open | Pending |
Q3 test results
Access & JML remediation timeline
SeptOctNovDecJan
ClosedIn progressOpenValidation (planned / failed / passed)Bars run from the cycle close when the finding was raised to the action target date.
ACC-03 Privileged access is just-in-time and reviewed
Requirement
ISO-A.8.2 · ITGC-AM-02 · RBI-CSF-NBFC-Annex-1-2 · RBI-ITGRCA-2023-7.1 · SOC2-CC6.1 · SOC2-CC6.3
mapped
Policy
Access Control Policy
pol-access
Control
ACC-03
Privileged access is just-in-time and reviewed
Application
Amazon Web Services (ap-south-1) · Microsoft Entra ID · SAP S/4HANA
mapped
Evidence · Q3
7 items
3 approved · 4 pending · 0 rejected
Test · Q3
Fail
TST-ITGC-ACC-03 · Medium confidence
Finding
F-ITGC-02 · Medium
In Progress
Action
Rahul Nair
REM-F-ITGC-02 · In Progress
Validation
Pending
as recorded