9 findings
As of 9 Oct 2026
As of 9 Oct 2026
| Finding | Observation | Control | Applications | Severity | Status | Owner | Action | Validation |
|---|---|---|---|---|---|---|---|---|
| F-ITGC-02 | Standing privileged access in production AWS | ACC-03 | Amazon Web Services (ap-south-1), Microsoft Entra ID, SAP S/4HANA | Medium | In Progress | Rahul Nair | REM-F-ITGC-02 · In Progress | Pending |
| F-IAQ2-ACC-03 | Standing privileged access in Entra and AWS | ACC-03 | Amazon Web Services (ap-south-1), Microsoft Entra ID, SAP S/4HANA | High | Closed | Ananya Rao | REM-F-IAQ2-ACC-03 · Closed | Failed |
| F-IAQ2-CHG-03 | Developers held standing production access | CHG-03 | Amazon Web Services (ap-south-1), GitHub Enterprise Cloud | High | Closed | Aditya Singh | REM-F-IAQ2-CHG-03 · Closed | Validated |
| F-IAQ2-VUL-01 | Critical vulnerabilities past remediation SLA | VUL-01 | Amazon Web Services (ap-south-1), GitHub Enterprise Cloud | High | Closed | Ananya Rao | REM-F-IAQ2-VUL-01 · Closed | Pending |
| F-IAQ2-BCP-01 | Restore test evidence incomplete | BCP-01 | Amazon Web Services (ap-south-1), Microsoft Azure (corporate) | Medium | Closed | Rahul Nair | REM-F-IAQ2-BCP-01 · Closed | Validated |
| F-IAQ2-LOG-01 | Customer portal not onboarded to the SIEM | LOG-01 | Amazon Web Services (ap-south-1), Microsoft Entra ID, Meridian Customer Portal | Medium | Closed | Ananya Rao | REM-F-IAQ2-LOG-01 · Closed | Validated |
| F-IAQ2-OPS-01 | Failed backup jobs not followed up | OPS-01 | Amazon Web Services (ap-south-1), Microsoft Azure (corporate) | Medium | Closed | Rahul Nair | REM-F-IAQ2-OPS-01 · Closed | Validated |
| F-ISO-01 | SAP HANA restore test exceeded RTO (internal ISMS audit, carried into surveillance) | BCP-01 | Amazon Web Services (ap-south-1), Microsoft Azure (corporate) | Medium | Closed | Rahul Nair | REM-F-ISO-01 · Closed | Validated |
| F-RBI-05 | Privileged access to production previously standing (MD-ITGRCA §7.1) | ACC-03 | Amazon Web Services (ap-south-1), Microsoft Entra ID, SAP S/4HANA | Medium | Closed | Ananya Rao | REM-F-RBI-05 · Closed | Validated |