Evidence · Q2-EV-036

Meridian Customer Portal · policy document (Q2)

AcceptedPolicy documentCollected 15 Jun 2026

Requirement to validation

Requirement
ISO-A.5.19 · ISO-A.5.24 · RBI-CSF-NBFC-Annex-1-2 · RBI-OITS-2023-9 · SOC2-CC7.3 · SOC2-CC9.2
mapped
Policy
Vendor & IT Outsourcing Risk Policy
pol-vendor
Control
VEN-03
Supplier security incidents are assessed for impact and tracked
Application
PayGate Payment Gateway · Meridian Customer Portal
mapped
Evidence · Q3
4 items
2 approved · 1 pending · 1 rejected
Test · Q3
Fail
TST-RBI-VEN-03 · High confidence
Finding
F-RBI-03 · High
In Progress
Action
Deepa Menon
REM-F-RBI-03 · In Progress
Validation
Pending
as recorded

Record

Control
VEN-03 · Supplier security incidents are assessed for impact and tracked
Source system
Meridian Customer Portal
Cycle
Q2 2026 Unified Program Review
Review note
Accepted for the Q2 baseline sample.
Provenance
Q2 2026 internal audit baseline workpaper (staged)