Evidence · Q2-EV-025

Microsoft Entra ID · access review (Q2)

RejectedAccess reviewCollected 8 Jun 2026

Requirement to validation

Requirement
ISO-A.8.15 · ISO-A.8.16 · RBI-CSF-NBFC-Annex-1-2 · RBI-ITGRCA-2023-7.6 · SOC2-CC7.2 · SOC2-CC7.3
mapped
Policy
Logging & Security Monitoring Standard
pol-logging
Control
LOG-01
Security events are centrally logged and monitored 24x7
Application
Amazon Web Services (ap-south-1) · Microsoft Entra ID · Meridian Customer Portal
mapped
Evidence · Q3
4 items
3 approved · 1 pending · 0 rejected
Test · Q3
Pass
TST-SOC2-LOG-01 · High confidence
Finding
F-IAQ2-LOG-01 · Medium
Closed
Action
Ananya Rao
REM-F-IAQ2-LOG-01 · Closed
Validation
Validated
as recorded

Record

Control
LOG-01 · Security events are centrally logged and monitored 24x7
Source system
Microsoft Entra ID
Cycle
Q2 2026 Unified Program Review
Review note
Did not cover the full quarter; superseded by the exception noted.
Provenance
Q2 2026 internal audit baseline workpaper (staged)