Evidence · RBI-REQ-007

AWS: No standing AdministratorAccess permission sets

Under reviewAutomated test resultCollected 5 Oct 2026

Requirement to validation

Requirement
ISO-A.8.2 · ITGC-AM-02 · RBI-CSF-NBFC-Annex-1-2 · RBI-ITGRCA-2023-7.1 · SOC2-CC6.1 · SOC2-CC6.3
mapped
Policy
Access Control Policy
pol-access
Control
ACC-03
Privileged access is just-in-time and reviewed
Application
Amazon Web Services (ap-south-1) · Microsoft Entra ID · SAP S/4HANA
mapped
Evidence · Q3
7 items
3 approved · 4 pending · 0 rejected
Test · Q3
Fail
TST-ITGC-ACC-03 · Medium confidence
Finding
F-ITGC-02 · Medium
In Progress
Action
Rahul Nair
REM-F-ITGC-02 · In Progress
Validation
Pending
as recorded

Record

Control
ACC-03 · Privileged access is just-in-time and reviewed
Source system
Cycle
Q3 2026 Unified Program Review
Review note
Submitted by the control owner; awaiting auditor review.
Provenance
PBC request REQ-007 · RBI Regulatory Controls — Q4 2026 Periodic Internal Audit