Meridian Alpha

Records

9 findings
As of 9 Oct 2026
FindingObservationControlApplicationsSeverityStatusOwnerActionValidation
F-ITGC-02Standing privileged access in production AWSACC-03Amazon Web Services (ap-south-1), Microsoft Entra ID, SAP S/4HANAMediumIn ProgressRahul NairREM-F-ITGC-02 · In ProgressPending
F-IAQ2-ACC-03Standing privileged access in Entra and AWSACC-03Amazon Web Services (ap-south-1), Microsoft Entra ID, SAP S/4HANAHighClosedAnanya RaoREM-F-IAQ2-ACC-03 · ClosedFailed
F-IAQ2-CHG-03Developers held standing production accessCHG-03Amazon Web Services (ap-south-1), GitHub Enterprise CloudHighClosedAditya SinghREM-F-IAQ2-CHG-03 · ClosedValidated
F-IAQ2-VUL-01Critical vulnerabilities past remediation SLAVUL-01Amazon Web Services (ap-south-1), GitHub Enterprise CloudHighClosedAnanya RaoREM-F-IAQ2-VUL-01 · ClosedPending
F-IAQ2-BCP-01Restore test evidence incompleteBCP-01Amazon Web Services (ap-south-1), Microsoft Azure (corporate)MediumClosedRahul NairREM-F-IAQ2-BCP-01 · ClosedValidated
F-IAQ2-LOG-01Customer portal not onboarded to the SIEMLOG-01Amazon Web Services (ap-south-1), Microsoft Entra ID, Meridian Customer PortalMediumClosedAnanya RaoREM-F-IAQ2-LOG-01 · ClosedValidated
F-IAQ2-OPS-01Failed backup jobs not followed upOPS-01Amazon Web Services (ap-south-1), Microsoft Azure (corporate)MediumClosedRahul NairREM-F-IAQ2-OPS-01 · ClosedValidated
F-ISO-01SAP HANA restore test exceeded RTO (internal ISMS audit, carried into surveillance)BCP-01Amazon Web Services (ap-south-1), Microsoft Azure (corporate)MediumClosedRahul NairREM-F-ISO-01 · ClosedValidated
F-RBI-05Privileged access to production previously standing (MD-ITGRCA §7.1)ACC-03Amazon Web Services (ap-south-1), Microsoft Entra ID, SAP S/4HANAMediumClosedAnanya RaoREM-F-RBI-05 · ClosedValidated