Action · REM-F-SOC2-01
Introduced GitHub 'emergency' label automation that blocks closure until CAB approval is linked; continuous monitoring test added. September population re-tested with no exceptions. Tracked as T-018 in Prismet Tasks.
ClosedOwner Aditya SinghTarget 19 Oct 2026
Requirement to validation
Requirement
ISO-A.8.32 · ITGC-CM-02 · RBI-ITGRCA-2023-7.4 · SOC2-CC8.1
mapped
Policy
Change Management Policy
pol-change
Control
CHG-02
Emergency changes are retrospectively approved
Application
GitHub Enterprise Cloud · ServiceNow ITSM
mapped
Evidence · Q3
5 items
2 approved · 1 pending · 2 rejected
Test · Q3
Fail
TST-SOC2-CHG-02 · High confidence
Finding
F-SOC2-01 · Medium
Closed
Action
Aditya Singh
REM-F-SOC2-01 · Closed
Validation
Validated
as recorded
Remediation
- Owner (FPR)
- Aditya Singh
- Priority
- Medium
- Target date
- 19 Oct 2026
- Status
- Closed
- Management response
- Introduced GitHub 'emergency' label automation that blocks closure until CAB approval is linked; continuous monitoring test added. September population re-tested with no exceptions.
Did it hold?
- Validation
- RET-F-SOC2-01
- Status
- Validated
- Planned
- 3 Oct 2026
- Method
- Retest of the remediated control by the engagement team.
- Result
- Retest passed on 2026-10-03 (Laura Bennett).