Evidence · RBI-REQ-016

GitHub: Bypass merges have retrospective approval

Under reviewAutomated test resultCollected 8 Oct 2026

Requirement to validation

Requirement
ISO-A.8.32 · ITGC-CM-02 · RBI-ITGRCA-2023-7.4 · SOC2-CC8.1
mapped
Policy
Change Management Policy
pol-change
Control
CHG-02
Emergency changes are retrospectively approved
Application
GitHub Enterprise Cloud · ServiceNow ITSM
mapped
Evidence · Q3
5 items
2 approved · 1 pending · 2 rejected
Test · Q3
Fail
TST-SOC2-CHG-02 · High confidence
Finding
F-SOC2-01 · Medium
Closed
Action
Aditya Singh
REM-F-SOC2-01 · Closed
Validation
Validated
as recorded

Record

Control
CHG-02 · Emergency changes are retrospectively approved
Source system
Cycle
Q3 2026 Unified Program Review
Review note
Submitted by the control owner; awaiting auditor review.
Provenance
PBC request REQ-016 · RBI Regulatory Controls — Q4 2026 Periodic Internal Audit