Security events are centrally logged and monitored 24x7

Security logs from Entra ID, AWS CloudTrail, GitHub, SAP and the Customer Portal are centralised in the SIEM and high-severity alerts are triaged by the SOC within 30 minutes.

Requirements

ISO-A.8.15 A.8.15 · Logging

ISO-A.8.16 A.8.16 · Monitoring activities

RBI-CSF-NBFC-Annex-1-2 RBI-CSF-NBFC Annex 1 §2 · Cyber security — SOC monitoring, vulnerability management, incident reporting (RBI Cyber Security Framework for NBFCs (IT Framework for the NBFC Sector))

RBI-ITGRCA-2023-7.6 RBI-ITGRCA-2023 §7.6 · Audit trails / logging — logs retained and reviewed; protected from tampering (RBI Master Direction on IT Governance, Risk, Controls and Assurance Practices, 2023)

SOC2-CC7.2 CC7.2 · Monitors system components for anomalies indicative of malicious acts

SOC2-CC7.3 CC7.3 · Evaluates security events to determine whether they are incidents

Policy

pol-logging · Logging & Security Monitoring Standard

Applications

Amazon Web Services (ap-south-1)Microsoft Entra IDMeridian Customer Portal

Third parties

—

Testing procedure

Microsoft Sentinel with data connectors; SOC runbooks. Tests: Amazon Web Services (ap-south-1): CloudTrail organisation trail enabled; Microsoft Entra ID: Entra diagnostic logs streamed to SIEM; Meridian Customer Portal: Portal audit events received in last 24h. Frequency continuous.