Test · TST-RBI-GOV-01
GOV-01 · IT Strategy Committee oversees IT and cyber risk
PassQ3 2026 Unified Program ReviewTested 2 Oct 2026 by Vikram Mehta, Farah Khan · Meridian Internal Audit (IS Audit cell)
Requirement to validation
Requirement
ISO-A.5.1 · RBI-ITGRCA-2023-11 · RBI-ITGRCA-2023-3 · SOC2-CC1.2
mapped
Policy
IT Governance Policy (RBI-aligned)
pol-itgov
Control
GOV-01
IT Strategy Committee oversees IT and cyber risk
Application
Meridian Customer Portal
mapped
Evidence · Q3
2 items
1 approved · 1 pending · 0 rejected
Test · Q3
Pass
TST-RBI-GOV-01 · High confidence
Finding
None
Action
None
Validation
Not planned
Procedure and result
- Procedure
- ITSC calendar; minutes uploaded to Prismet. Tests: Meridian Customer Portal: ITSC minutes uploaded for quarter. Frequency quarterly.
- Sample
- 2 items sampled (inspection)
- Expected
- The Board's IT Strategy Committee meets at least quarterly, reviews IT/cyber risk, IS audit results and major incidents, and minutes are retained.
- Observed
- Operating effectiveness confirmed for Meridian Customer Portal; no exceptions in 2 sample(s).
- Confidence
- High
- Evidence
- RBI-REQ-001