Action · REM-F-IAQ2-CHG-02
Remediate: emergency changes without retrospective cab approval.
ClosedOwner Aditya SinghTarget 31 Jul 2026
Requirement to validation
Requirement
ISO-A.8.32 · ITGC-CM-02 · RBI-ITGRCA-2023-7.4 · SOC2-CC8.1
mapped
Policy
Change Management Policy
pol-change
Control
CHG-02
Emergency changes are retrospectively approved
Application
GitHub Enterprise Cloud · ServiceNow ITSM
mapped
Evidence · Q3
5 items
2 approved · 1 pending · 2 rejected
Test · Q3
Fail
TST-SOC2-CHG-02 · High confidence
Finding
F-IAQ2-CHG-02 · Medium
Closed
Action
Aditya Singh
REM-F-IAQ2-CHG-02 · Closed
Validation
Failed
as recorded
Remediation
- Owner (FPR)
- Aditya Singh
- Priority
- Medium
- Target date
- 31 Jul 2026
- Status
- Closed
- Management response
- Management agreed and committed to remediate before the Q3 review.
Did it hold?
- Validation
- RET-F-IAQ2-CHG-02
- Status
- Failed
- Planned
- 26 Sep 2026
- Method
- Retest in the Q3 review.
- Result
- July-August emergency changes still lacked CAB approval; re-raised as F-SOC2-01 (since remediated and retested).