| ACC-01 | MFA and SSO enforced for workforce access | Access Control | Amazon Web Services (ap-south-1), Microsoft Entra ID, GitHub Enterprise Cloud | Pass | 0 |
| ACC-02 | User access provisioning is approved before grant | Access Control | Microsoft Entra ID, SAP S/4HANA, ServiceNow ITSM | Pass | 0 |
| ACC-03 | Privileged access is just-in-time and reviewed | Access Control | Amazon Web Services (ap-south-1), Microsoft Entra ID, SAP S/4HANA | Fail | 1 |
| ACC-04 | Quarterly user access review of in-scope applications | Access Control | Microsoft Entra ID, Salesforce (Sales + Financial Services Cloud), SAP S/4HANA | Not tested | 0 |
| JML-01 | Leavers are de-provisioned within 24 hours | Joiner/Mover/Leaver | Darwinbox HRMS, Microsoft Entra ID, SAP S/4HANA | Pass | 0 |
| JML-02 | Mover access is recertified on role change | Joiner/Mover/Leaver | Darwinbox HRMS, Microsoft Entra ID, SAP S/4HANA | Fail | 1 |
| LOG-01 | Security events are centrally logged and monitored 24x7 | Logging & Monitoring | Amazon Web Services (ap-south-1), Microsoft Entra ID, Meridian Customer Portal | Pass | 0 |