Action · REM-F-IAQ2-VEN-01
Remediate: critical vendor reassessments not tracked.
ClosedOwner Sanjay KulkarniTarget 31 Jul 2026
Requirement to validation
Requirement
ISO-A.5.19 · ISO-A.5.22 · RBI-OITS-2023-6 · RBI-OITS-2023-9 · SOC2-CC9.2
mapped
Policy
Vendor & IT Outsourcing Risk Policy
pol-vendor
Control
VEN-01
Critical third parties are risk-assessed before onboarding and annually
Application
PayGate Payment Gateway · Salesforce (Sales + Financial Services Cloud)
mapped
Evidence · Q3
3 items
2 approved · 1 pending · 0 rejected
Test · Q3
Fail
TST-RBI-VEN-01 · Medium confidence
Finding
F-IAQ2-VEN-01 · Medium
Closed
Action
Sanjay Kulkarni
REM-F-IAQ2-VEN-01 · Closed
Validation
Failed
as recorded
Remediation
- Owner (FPR)
- Sanjay Kulkarni
- Priority
- Medium
- Target date
- 31 Jul 2026
- Status
- Closed
- Management response
- Management agreed and committed to remediate before the Q3 review.
Did it hold?
- Validation
- RET-F-IAQ2-VEN-01
- Status
- Failed
- Planned
- 26 Sep 2026
- Method
- Retest in the Q3 review.
- Result
- Q3 retest: PayGate assurance lapsed and Northstar reassessment still overdue; re-raised as F-RBI-02.