Evidence · Q2-EV-007

SAP S/4HANA · policy document (Q2)

RejectedPolicy documentCollected 14 Jun 2026

Requirement to validation

Requirement
ISO-A.5.18 · ITGC-AM-03 · RBI-ITGRCA-2023-7.1 · SOC2-CC6.2 · SOC2-CC6.3
mapped
Policy
Access Control Policy
pol-access
Control
ACC-04
Quarterly user access review of in-scope applications
Application
Microsoft Entra ID · Salesforce (Sales + Financial Services Cloud) · SAP S/4HANA
mapped
Evidence · Q3
5 items
0 approved · 5 pending · 0 rejected
Test · Q3
Not tested
Finding
F-IAQ2-ACC-04 · Medium
Closed
Action
Ananya Rao
REM-F-IAQ2-ACC-04 · Closed
Validation
Pending
as recorded

Record

Control
ACC-04 · Quarterly user access review of in-scope applications
Source system
SAP S/4HANA
Cycle
Q2 2026 Unified Program Review
Review note
Did not cover the full quarter; superseded by the exception noted.
Provenance
Q2 2026 internal audit baseline workpaper (staged)