Evidence · RBI-REQ-003

Microsoft Entra ID: Conditional access requires MFA for all users

AcceptedAutomated test resultCollected 7 Oct 2026

Requirement to validation

Requirement
ISO-A.5.17 · ISO-A.8.5 · ITGC-AM-04 · RBI-ITGRCA-2023-7.1 · SOC2-CC6.1
mapped
Policy
Access Control Policy
pol-access
Control
ACC-01
MFA and SSO enforced for workforce access
Application
Amazon Web Services (ap-south-1) · Microsoft Entra ID · GitHub Enterprise Cloud
mapped
Evidence · Q3
6 items
6 approved · 0 pending · 0 rejected
Test · Q3
Pass
TST-RBI-ACC-01 · High confidence
Finding
None
Action
None
Validation
Not planned

Record

Control
ACC-01 · MFA and SSO enforced for workforce access
Source system
Microsoft Entra ID
Cycle
Q3 2026 Unified Program Review
Review note
Evidence reviewed against the control requirement; complete and accepted.
Provenance
PBC request REQ-003 · RBI Regulatory Controls — Q4 2026 Periodic Internal Audit