Action · REM-F-IAQ2-ACC-02
Remediate: access granted in sap without recorded approval.
ClosedOwner Ananya RaoTarget 31 Jul 2026
Requirement to validation
Requirement
ISO-A.5.15 · ISO-A.5.18 · ITGC-AM-01 · RBI-ITGRCA-2023-7.1 · SOC2-CC6.2
mapped
Policy
Access Control Policy
pol-access
Control
ACC-02
User access provisioning is approved before grant
Application
Microsoft Entra ID · SAP S/4HANA · ServiceNow ITSM
mapped
Evidence · Q3
6 items
6 approved · 0 pending · 0 rejected
Test · Q3
Pass
TST-ITGC-ACC-02 · High confidence
Finding
F-IAQ2-ACC-02 · High
Closed
Action
Ananya Rao
REM-F-IAQ2-ACC-02 · Closed
Validation
Validated
as recorded
Remediation
- Owner (FPR)
- Ananya Rao
- Priority
- High
- Target date
- 31 Jul 2026
- Status
- Closed
- Management response
- Management agreed and committed to remediate before the Q3 review.
Did it hold?
- Validation
- RET-F-IAQ2-ACC-02
- Status
- Validated
- Planned
- 26 Sep 2026
- Method
- Retest in the Q3 review.
- Result
- September sample of 25 grants all carried line-manager and application-owner approval; direct grant path removed.