Evidence · Q2-EV-004

SAP S/4HANA · access review (Q2)

RejectedAccess reviewCollected 23 Jun 2026

Requirement to validation

Requirement
ISO-A.5.15 · ISO-A.5.18 · ITGC-AM-01 · RBI-ITGRCA-2023-7.1 · SOC2-CC6.2
mapped
Policy
Access Control Policy
pol-access
Control
ACC-02
User access provisioning is approved before grant
Application
Microsoft Entra ID · SAP S/4HANA · ServiceNow ITSM
mapped
Evidence · Q3
6 items
6 approved · 0 pending · 0 rejected
Test · Q3
Pass
TST-ITGC-ACC-02 · High confidence
Finding
F-IAQ2-ACC-02 · High
Closed
Action
Ananya Rao
REM-F-IAQ2-ACC-02 · Closed
Validation
Validated
as recorded

Record

Control
ACC-02 · User access provisioning is approved before grant
Source system
SAP S/4HANA
Cycle
Q2 2026 Unified Program Review
Review note
Did not cover the full quarter; superseded by the exception noted.
Provenance
Q2 2026 internal audit baseline workpaper (staged)