Meridian Alpha

Executive View

Board pack
Meridian Alpha · assurance records
As of 9 Oct 2026
Prismet AI summary·Updated 9 Oct 2026·from 28 findings · 57 tests · 138 evidence · 28 validations · 8 monitoring findings

Findings raised fell to 12 in Q3 2026 from 16 in Q2 2026, and high-severity findings went from 7 to 5. Control exceptions decreased from 13 to 8; open findings are concentrated in SAP S/4HANA (5).

Remediation is not holding: 5 of the 16 Q2 2026 remediations failed retest. Evidence approval in Q3 2026 rose to 77% from 50% in Q2 2026, with 19 items awaiting review.

Continuous monitoring shows 8 findings.

Overall, all 4 period-on-period metrics changed; none moved adversely. Remediation retest and monitoring have no prior-period trend and are reported above.

AI-generated from assurance records — review before use.

Was this helpful?
Findings raised
12
▼ -25% (-4) vs Q2 2026

Findings raised fell from 16 in Q2 2026 to 12 in Q3 2026.

Investigate →
High-severity findings
5
▼ -29% (-2) vs Q2 2026

High-severity findings fell from 7 in Q2 2026 to 5 in Q3 2026.

Investigate →
Control exceptions
8
▼ -38% (-5) vs Q2 2026

Failed control tests fell from 13 in Q2 2026 to 8 in Q3 2026.

Investigate →
Remediation that failed retest● Not holding
5 of 16
No prior period

5 of the 16 Q2 2026 remediations failed retest; 9 Q3 2026 retests are still pending.

Investigate →
Changed
1 regulatory update affects 6 controls
RBI · Strengthening cyber resilience and digital payment security for regulated entities · effective 1 Apr 2027
● records
Drill in →
Tested
Q3 testing recorded · 8 of 21 controls failed
0 passed with an observation
● records
Drill in →
Matters
5 high-severity findings open
Unmitigated SoD conflict: payments approval and GL posting held by transferred employee · Purchase order released by requester above delegation threshold · Access of transferred staff not revoked — SoD breach in payment approval (MD-ITGRCA §7.1) · Payment provider incident — incomplete credential rotation · Credit line activated before KYC completion (KYC MD §16)
● records
Drill in →
Blocked
5 remediations failed validation
rework required before closure
● records
Drill in →
Overdue
0 actions overdue
as of 9 Oct 2026 · next target dates in Oct 2026 – Nov 2026
● records
Drill in →
Decision
No decision pending
no integrity signal recorded
● records
Drill in →
Third party
PayGate Payments Pvt. Ltd. advisory touches 3 applications
2 of 4 response actions validated
● records
Drill in →
Monitoring
8 identity & access findings
last run 9 Oct 2026 · 0 days before snapshot · 0 controls with no run recorded
● records
Drill in →
Resolved
19 actions closed · 12 validated
as recorded across all cycles
● records
Drill in →
Evidence
95 of 138 evidence approved
every figure traces to source records
● records
Drill in →