19 tests
As of 9 Oct 2026
As of 9 Oct 2026
| Test | Control | Cycle | Tested | By | Result | Confidence |
|---|---|---|---|---|---|---|
| TST-ISO-BCP-01 | BCP-01 · Backup restore and DR are tested | Q3 2026 Unified Program Review | 7 Oct 2026 | Suresh Pillai · Northgate Certification Services | Pass | High |
| TST-RBI-OPS-01 | OPS-01 · Backups are performed daily and monitored | Q3 2026 Unified Program Review | 7 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit (IS Audit cell) | Pass | High |
| TST-ITGC-OPS-01 | OPS-01 · Backups are performed daily and monitored | Q3 2026 Unified Program Review | 4 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit | Pass | High |
| TST-ITGC-CHG-03 | CHG-03 · Developers have no standing production access; deployments via pipeline only | Q3 2026 Unified Program Review | 3 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit | Pass | High |
| TST-RBI-ACC-01 | ACC-01 · MFA and SSO enforced for workforce access | Q3 2026 Unified Program Review | 3 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit (IS Audit cell) | Pass | High |
| TST-SOC2-ACC-01 | ACC-01 · MFA and SSO enforced for workforce access | Q3 2026 Unified Program Review | 3 Oct 2026 | Laura Bennett · Kestrel Assurance LLP | Pass | High |
| TST-SOC2-ENC-01 | ENC-01 · Customer and payment data encrypted at rest and in transit | Q3 2026 Unified Program Review | 3 Oct 2026 | Laura Bennett · Kestrel Assurance LLP | Pass | High |
| TST-SOC2-LOG-01 | LOG-01 · Security events are centrally logged and monitored 24x7 | Q3 2026 Unified Program Review | 3 Oct 2026 | Laura Bennett · Kestrel Assurance LLP | Pass | High |
| TST-SOC2-OPS-01 | OPS-01 · Backups are performed daily and monitored | Q3 2026 Unified Program Review | 3 Oct 2026 | Laura Bennett · Kestrel Assurance LLP | Pass | High |
| TST-ITGC-ACC-03 | ACC-03 · Privileged access is just-in-time and reviewed | Q3 2026 Unified Program Review | 2 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit | Fail | Medium |
| TST-RBI-BCP-01 | BCP-01 · Backup restore and DR are tested | Q3 2026 Unified Program Review | 1 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit (IS Audit cell) | Pass | High |
| TST-Q2-BCP-01 | BCP-01 · Backup restore and DR are tested | Q2 2026 Unified Program Review | 20 Jun 2026 | Farah Khan, Vikram Mehta · Meridian Internal Audit | Pass with Observation | Medium |
| TST-Q2-ACC-03 | ACC-03 · Privileged access is just-in-time and reviewed | Q2 2026 Unified Program Review | 18 Jun 2026 | Farah Khan, Vikram Mehta · Meridian Internal Audit | Fail | High |
| TST-Q2-CHG-03 | CHG-03 · Developers have no standing production access; deployments via pipeline only | Q2 2026 Unified Program Review | 18 Jun 2026 | Farah Khan, Vikram Mehta · Meridian Internal Audit | Fail | High |
| TST-Q2-LOG-01 | LOG-01 · Security events are centrally logged and monitored 24x7 | Q2 2026 Unified Program Review | 18 Jun 2026 | Farah Khan, Vikram Mehta · Meridian Internal Audit | Fail | High |
| TST-Q2-OPS-01 | OPS-01 · Backups are performed daily and monitored | Q2 2026 Unified Program Review | 18 Jun 2026 | Farah Khan, Vikram Mehta · Meridian Internal Audit | Fail | High |
| TST-Q2-VUL-01 | VUL-01 · Vulnerabilities are scanned and remediated within SLA | Q2 2026 Unified Program Review | 18 Jun 2026 | Farah Khan, Vikram Mehta · Meridian Internal Audit | Fail | High |
| TST-Q2-ACC-01 | ACC-01 · MFA and SSO enforced for workforce access | Q2 2026 Unified Program Review | 12 Jun 2026 | Farah Khan, Vikram Mehta · Meridian Internal Audit | Pass | High |
| TST-Q2-ENC-01 | ENC-01 · Customer and payment data encrypted at rest and in transit | Q2 2026 Unified Program Review | 12 Jun 2026 | Farah Khan, Vikram Mehta · Meridian Internal Audit | Pass | High |