Action · REM-F-IAQ2-CHG-03
Remediate: developers held standing production access.
ClosedOwner Aditya SinghTarget 31 Jul 2026
Requirement to validation
Requirement
ISO-A.8.31 · ITGC-CM-03 · RBI-ITGRCA-2023-7.4 · SOC2-CC6.1 · SOC2-CC8.1
mapped
Policy
Change Management Policy
pol-change
Control
CHG-03
Developers have no standing production access; deployments via pipeline only
Application
Amazon Web Services (ap-south-1) · GitHub Enterprise Cloud
mapped
Evidence · Q3
3 items
2 approved · 1 pending · 0 rejected
Test · Q3
Pass
TST-ITGC-CHG-03 · High confidence
Finding
F-IAQ2-CHG-03 · High
Closed
Action
Aditya Singh
REM-F-IAQ2-CHG-03 · Closed
Validation
Validated
as recorded
Remediation
- Owner (FPR)
- Aditya Singh
- Priority
- High
- Target date
- 31 Jul 2026
- Status
- Closed
- Management response
- Management agreed and committed to remediate before the Q3 review.
Did it hold?
- Validation
- RET-F-IAQ2-CHG-03
- Status
- Validated
- Planned
- 26 Sep 2026
- Method
- Retest in the Q3 review.
- Result
- Console access removed; deployments only via pipeline confirmed in the ITGC Q3 test of CHG-03.