Evidence · Q2-EV-023

GitHub Enterprise Cloud · ticket sample (Q2)

RejectedTicket sampleCollected 22 Jun 2026

Requirement to validation

Requirement
ISO-A.8.8 · RBI-CSF-NBFC-Annex-1-2 · RBI-ITGRCA-2023-7.4 · SOC2-CC7.1
mapped
Policy
Logging & Security Monitoring Standard
pol-logging
Control
VUL-01
Vulnerabilities are scanned and remediated within SLA
Application
Amazon Web Services (ap-south-1) · GitHub Enterprise Cloud
mapped
Evidence · Q3
0 items
0 approved · 0 pending · 0 rejected
Test · Q3
Not tested
Finding
F-IAQ2-VUL-01 · High
Closed
Action
Ananya Rao
REM-F-IAQ2-VUL-01 · Closed
Validation
Pending
as recorded

Record

Control
VUL-01 · Vulnerabilities are scanned and remediated within SLA
Source system
GitHub Enterprise Cloud
Cycle
Q2 2026 Unified Program Review
Review note
Did not cover the full quarter; superseded by the exception noted.
Provenance
Q2 2026 internal audit baseline workpaper (staged)