Meridian Alpha
Internal Controls
Meridian Alpha · assurance records
Q3 2026 Unified Program Review · as of 9 Oct 2026
Q3 2026 Unified Program Review · as of 9 Oct 2026
Access & JML controls
6
Access Control · Joiner/Mover/Leaver
Open findings
2
0 high severity
Q3 test exceptions
2
0 with observation · 5 tested
Open actions
2
linked to these findings
Validations pending
2
0 failed
Controls tested by audit cycle
Control risk level by current test result
Fail
Pass with observation
Pass
High risk
Medium risk
Low risk
Click a cell to list its controls. Risk level is the control's recorded rating; result is the current-period test.
Open findings by application
Open findings by control domain
Access & JML findings
| Control | Observation | Domain | Severity | Owner | Target | Action | Validation |
|---|---|---|---|---|---|---|---|
| ACC-03 | Standing privileged access in production AWS | Access Control | Medium | Rahul Nair | 16 Oct 2026 | In Progress | Pending |
| JML-02 | Mover access not removed timely (deviation in CC6.2 testing) | Joiner/Mover/Leaver | Medium | Neha Iyer | 31 Oct 2026 | Open | Pending |
Q3 test results
Access & JML remediation timeline
SeptOctNovDecJan
ClosedIn progressOpenValidation (planned / failed / passed)Bars run from the cycle close when the finding was raised to the action target date.
JML-02 Mover access is recertified on role change
Requirement
ISO-A.5.18 · ISO-A.6.5 · ITGC-AM-01 · ITGC-SOD-01 · RBI-ITGRCA-2023-7.1 · SOC2-CC6.2 · SOC2-CC6.3
mapped
Policy
Access Control Policy
pol-access
Control
JML-02
Mover access is recertified on role change
Application
Darwinbox HRMS · Microsoft Entra ID · SAP S/4HANA
mapped
Evidence · Q3
9 items
9 approved · 0 pending · 0 rejected
Test · Q3
Fail
TST-ITGC-JML-02 · High confidence
Finding
F-SOC2-02 · Medium
Open
Action
Neha Iyer
REM-F-SOC2-02 · Open
Validation
Pending
as recorded