Q3 2026
As of 9 Oct 2026
As of 9 Oct 2026
Findings raised
12
▼ -25% (-4) vs Q2 2026
Findings raised fell from 16 in Q2 2026 to 12 in Q3 2026.
Investigate →Findings raised by control
findings · Q3 2026
SOD-01 · Segregation of incompatible duties in SAP2(1)ACC-03 · Privileged access is just-in-time and reviewed2(1)BCP-01 · Backup restore and DR are tested1(1)P2P-01 · Purchase orders follow approval thresholds; no self-approval1(1)VEN-01 · Critical third parties are risk-assessed before onboarding and annually1(1)KYC-01 · Customer accounts are activated only with complete KYC1(1)CHG-02 · Emergency changes are retrospectively approved1(1)VEN-02 · Provider contracts include data protection and RBI audit clauses1(0)VEN-03 · Supplier security incidents are assessed for impact and tracked1(0)JML-02 · Mover access is recertified on role change1(0)ACC-02 · User access provisioning is approved before grant0(1)ACC-04 · Quarterly user access review of in-scope applications0(1)CHG-01 · Production code changes are peer-reviewed and approved0(1)CHG-03 · Developers have no standing production access; deployments via pipeline only0(1)JML-01 · Leavers are de-provisioned within 24 hours0(1)LOG-01 · Security events are centrally logged and monitored 24x70(1)OPS-01 · Backups are performed daily and monitored0(1)PAY-01 · Payment APIs secured with mTLS, signing and customer 2FA0(1)VUL-01 · Vulnerabilities are scanned and remediated within SLA0(1)
- SOD-01 · Segregation of incompatible duties in SAP 2 17%
- ACC-03 · Privileged access is just-in-time and reviewed 2 17%
- BCP-01 · Backup restore and DR are tested 1 8%
- P2P-01 · Purchase orders follow approval thresholds; no self-approval 1 8%
- VEN-01 · Critical third parties are risk-assessed before onboarding and annually 1 8%
- Other (14) 5 42%
Domains between periods
Fastest rise: Third-Party Risk (+2)
Each line is a control domain, from Q2 2026 to Q3 2026 (recorded values only). Red = rising, green = falling. Click a domain for its records.
Open remediation timeline
JunJulAugSeptOctNovDecJan
Today
REM-F-ITGC-01 Priya SharmaREM-F-RBI-03 Deepa MenonREM-F-ITGC-02 Rahul NairREM-F-ITGC-03 Priya SharmaREM-F-RBI-02 Sanjay KulkarniREM-F-RBI-04 Arjun KapoorREM-F-ISO-02 Sanjay KulkarniREM-F-SOC2-02 Neha IyerREM-F-RBI-01 Priya SharmaClosedIn progressOpenValidation (planned / failed / passed)Bars run from the cycle close when the finding was raised to the action target date.