Meridian Alpha

Records

FindingsActionsValidationsEvidenceTestsControlsMonitoring
50 evidence
As of 9 Oct 2026
Filtered byApplication: Amazon Web Services (ap-south-1) ✕Severity: High ✕
EvidenceTitleControlSource systemCollectedStatus
ISO-REQ-020AWS: Portal DB restore test reportBCP-018 Oct 2026Accepted
ISO-REQ-021Microsoft Azure: SAP HANA restore test reportBCP-017 Oct 2026Accepted
ITGC-REQ-004Microsoft Entra ID: No permanent Global Administrator assignmentsACC-03Microsoft Entra ID8 Oct 2026Accepted
ITGC-REQ-005AWS: No standing AdministratorAccess permission setsACC-037 Oct 2026Accepted
ITGC-REQ-006SAP S/4HANA: Firefighter sessions reviewedACC-03SAP S/4HANA6 Oct 2026Accepted
ITGC-REQ-025GitHub: Production environment requires reviewersCHG-035 Oct 2026Accepted
ITGC-REQ-026AWS: No developer roles with prod writeCHG-034 Oct 2026Accepted
ITGC-REQ-027AWS: AWS Backup jobs succeeded in last 24hOPS-014 Oct 2026Accepted
ITGC-REQ-028Microsoft Azure: Azure Recovery Services vault jobs succeededOPS-019 Oct 2026Accepted
ITGC-REQ-029AWS: Portal DB restore test reportBCP-019 Oct 2026Under review
Q2-EV-001Microsoft Entra ID · configuration report (Q2)ACC-01Microsoft Entra ID8 Jun 2026Accepted
Q2-EV-002Amazon Web Services (ap-south-1) · ticket sample (Q2)ACC-01Amazon Web Services (ap-south-1)13 Jun 2026Accepted
Q2-EV-005Microsoft Entra ID · access review (Q2)ACC-03Microsoft Entra ID4 Jun 2026Rejected
Q2-EV-006Amazon Web Services (ap-south-1) · policy document (Q2)ACC-03Amazon Web Services (ap-south-1)9 Jun 2026Rejected
Q2-EV-020GitHub Enterprise Cloud · system export (Q2)CHG-03GitHub Enterprise Cloud7 Jun 2026Rejected
Q2-EV-021Amazon Web Services (ap-south-1) · configuration report (Q2)CHG-03Amazon Web Services (ap-south-1)12 Jun 2026Rejected
Q2-EV-022Amazon Web Services (ap-south-1) · configuration report (Q2)VUL-01Amazon Web Services (ap-south-1)17 Jun 2026Rejected
Q2-EV-023GitHub Enterprise Cloud · ticket sample (Q2)VUL-01GitHub Enterprise Cloud22 Jun 2026Rejected
Q2-EV-024Amazon Web Services (ap-south-1) · ticket sample (Q2)LOG-01Amazon Web Services (ap-south-1)3 Jun 2026Rejected
Q2-EV-025Microsoft Entra ID · access review (Q2)LOG-01Microsoft Entra ID8 Jun 2026Rejected
Q2-EV-026Amazon Web Services (ap-south-1) · policy document (Q2)OPS-01Amazon Web Services (ap-south-1)13 Jun 2026Accepted
Q2-EV-027Microsoft Azure (corporate) · screenshot (Q2)OPS-01Microsoft Azure (corporate)18 Jun 2026Rejected
Q2-EV-028Amazon Web Services (ap-south-1) · screenshot (Q2)BCP-01Amazon Web Services (ap-south-1)23 Jun 2026Accepted
Q2-EV-029Microsoft Azure (corporate) · system export (Q2)BCP-01Microsoft Azure (corporate)4 Jun 2026Accepted
Q2-EV-030Amazon Web Services (ap-south-1) · system export (Q2)ENC-01Amazon Web Services (ap-south-1)9 Jun 2026Accepted
Q2-EV-031Meridian Customer Portal · configuration report (Q2)ENC-01Meridian Customer Portal14 Jun 2026Accepted
RBI-REQ-003Microsoft Entra ID: Conditional access requires MFA for all usersACC-01Microsoft Entra ID7 Oct 2026Accepted
RBI-REQ-004AWS: AWS IAM Identity Center federated to EntraACC-016 Oct 2026Accepted
RBI-REQ-005GitHub: GitHub org enforces SAML SSOACC-015 Oct 2026Accepted
RBI-REQ-006Microsoft Entra ID: No permanent Global Administrator assignmentsACC-03Microsoft Entra ID6 Oct 2026Under review
RBI-REQ-007AWS: No standing AdministratorAccess permission setsACC-035 Oct 2026Under review
RBI-REQ-018AWS: CloudTrail organisation trail enabledLOG-017 Oct 2026Under review
RBI-REQ-023AWS: AWS Backup jobs succeeded in last 24hOPS-015 Oct 2026Accepted
RBI-REQ-024Microsoft Azure: Azure Recovery Services vault jobs succeededOPS-014 Oct 2026Accepted
RBI-REQ-025AWS: Portal DB restore test reportBCP-014 Oct 2026Accepted
RBI-REQ-026Microsoft Azure: SAP HANA restore test reportBCP-019 Oct 2026Accepted
SOC2-REQ-001Microsoft Entra ID: Conditional access requires MFA for all usersACC-01Microsoft Entra ID9 Oct 2026Accepted
SOC2-REQ-002AWS: AWS IAM Identity Center federated to EntraACC-018 Oct 2026Accepted
SOC2-REQ-003GitHub: GitHub org enforces SAML SSOACC-017 Oct 2026Accepted
SOC2-REQ-008AWS: No standing AdministratorAccess permission setsACC-036 Oct 2026Under review
SOC2-REQ-009SAP S/4HANA: Firefighter sessions reviewedACC-03SAP S/4HANA5 Oct 2026Under review
SOC2-REQ-024GitHub: Production environment requires reviewersCHG-037 Oct 2026Under review
SOC2-REQ-028AWS: CloudTrail organisation trail enabledLOG-015 Oct 2026Accepted
SOC2-REQ-029Microsoft Entra ID: Entra diagnostic logs streamed to SIEMLOG-01Microsoft Entra ID4 Oct 2026Accepted
SOC2-REQ-030Meridian Customer Portal: Portal audit events received in last 24hLOG-01Meridian Customer Portal9 Oct 2026Accepted
SOC2-REQ-031AWS: AWS Backup jobs succeeded in last 24hOPS-014 Oct 2026Accepted
SOC2-REQ-032Microsoft Azure: Azure Recovery Services vault jobs succeededOPS-019 Oct 2026Accepted
SOC2-REQ-033AWS: Portal DB restore test reportBCP-019 Oct 2026Under review
SOC2-REQ-035AWS: RDS and S3 encryption enabledENC-018 Oct 2026Accepted
SOC2-REQ-036Meridian Customer Portal: TLS configuration on portal endpointsENC-01Meridian Customer Portal7 Oct 2026Accepted