Control · KYC-01

Customer accounts are activated only with complete KYC

Customer OnboardingISO 27001 · ITGC · RBIRisk High

Requirement to validation

Requirement
ISO-A.5.31 · ITGC-BP-01 · RBI-KYC-MD-2016-16
mapped
Policy
KYC / AML Policy
pol-kyc
Control
KYC-01
Customer accounts are activated only with complete KYC
Application
Meridian Customer Portal · Salesforce (Sales + Financial Services Cloud)
mapped
Evidence · Q3
3 items
2 approved · 1 pending · 0 rejected
Test · Q3
Fail
TST-RBI-KYC-01 · Medium confidence
Finding
F-RBI-04 · High
Open
Action
Arjun Kapoor
REM-F-RBI-04 · In Progress
Validation
Pending
as recorded

What should be true

Salesforce onboarding cases cannot move to 'Approved' and the Customer Portal cannot activate a credit line until all required KYC documents are verified (PAN, address proof, constitution documents, beneficial-owner declaration).

Requirements
ISO-A.5.31 A.5.31 · Legal, statutory, regulatory and contractual requirements
ITGC-BP-01 ITGC-BP-01 · Automated application controls — approval workflow and thresholds
RBI-KYC-MD-2016-16 RBI-KYC-MD-2016 §16 · Customer Due Diligence — officially valid documents obtained before account-based relationship (RBI Master Direction — Know Your Customer (KYC) Direction, 2016 (updated))
Policy
pol-kyc · KYC / AML Policy
Applications
Meridian Customer PortalSalesforce (Sales + Financial Services Cloud)
Third parties
Northstar BPO Services Ltd.VeriKYC Solutions Pvt. Ltd.
Testing procedure
Salesforce validation rule + continuous monitoring check. Tests: Salesforce (Sales + Financial Services Cloud): Approved onboarding cases have complete KYC checklist; Meridian Customer Portal: Activated accounts linked to approved case. Frequency continuous.

Findings (2)

Open list →
FindingObservationControlApplicationsSeverityStatusOwnerActionValidation
F-RBI-04Credit line activated before KYC completion (KYC MD §16)KYC-01Meridian Customer Portal, Salesforce (Sales + Financial Services Cloud)HighOpenArjun KapoorREM-F-RBI-04 · In ProgressPending
F-IAQ2-KYC-01KYC document checks performed after account activationKYC-01Meridian Customer Portal, Salesforce (Sales + Financial Services Cloud)MediumClosedArjun KapoorREM-F-IAQ2-KYC-01 · ClosedFailed

Evidence (5)

Open list →
EvidenceTitleControlSource systemCollectedStatus
ITGC-REQ-033Meridian Customer Portal: Activated accounts linked to approved caseKYC-01Meridian Customer Portal6 Oct 2026Under review
Q2-EV-037Salesforce (Sales + Financial Services Cloud) · policy document (Q2)KYC-01Salesforce (Sales + Financial Services Cloud)20 Jun 2026Accepted
Q2-EV-038Meridian Customer Portal · screenshot (Q2)KYC-01Meridian Customer Portal25 Jun 2026Accepted
RBI-REQ-032Salesforce: Approved onboarding cases have complete KYC checklistKYC-016 Oct 2026Accepted
RBI-REQ-033Meridian Customer Portal: Activated accounts linked to approved caseKYC-01Meridian Customer Portal5 Oct 2026Accepted

Tests (2)

Open list →
TestControlCycleTestedByResultConfidence
TST-RBI-KYC-01KYC-01 · Customer accounts are activated only with complete KYCQ3 2026 Unified Program Review4 Oct 2026Vikram Mehta, Farah Khan · Meridian Internal Audit (IS Audit cell)FailMedium
TST-Q2-KYC-01KYC-01 · Customer accounts are activated only with complete KYCQ2 2026 Unified Program Review20 Jun 2026Farah Khan, Vikram Mehta · Meridian Internal AuditPass with ObservationHigh