6 findings
As of 9 Oct 2026
As of 9 Oct 2026
| Finding | Observation | Control | Applications | Severity | Status | Owner | Action | Validation |
|---|---|---|---|---|---|---|---|---|
| F-ITGC-02 | Standing privileged access in production AWS | ACC-03 | Amazon Web Services (ap-south-1), Microsoft Entra ID, SAP S/4HANA | Medium | In Progress | Rahul Nair | REM-F-ITGC-02 · In Progress | Pending |
| F-SOC2-02 | Mover access not removed timely (deviation in CC6.2 testing) | JML-02 | Darwinbox HRMS, Microsoft Entra ID, SAP S/4HANA | Medium | Open | Neha Iyer | REM-F-SOC2-02 · Open | Pending |
| F-IAQ2-ACC-04 | Salesforce user access review not completed | ACC-04 | Microsoft Entra ID, Salesforce (Sales + Financial Services Cloud), SAP S/4HANA | Medium | Closed | Ananya Rao | REM-F-IAQ2-ACC-04 · Closed | Pending |
| F-IAQ2-JML-01 | Leaver de-provisioning occasionally exceeds 24 hours | JML-01 | Darwinbox HRMS, Microsoft Entra ID, SAP S/4HANA | Medium | Closed | Neha Iyer | REM-F-IAQ2-JML-01 · Closed | Validated |
| F-IAQ2-LOG-01 | Customer portal not onboarded to the SIEM | LOG-01 | Amazon Web Services (ap-south-1), Microsoft Entra ID, Meridian Customer Portal | Medium | Closed | Ananya Rao | REM-F-IAQ2-LOG-01 · Closed | Validated |
| F-RBI-05 | Privileged access to production previously standing (MD-ITGRCA §7.1) | ACC-03 | Amazon Web Services (ap-south-1), Microsoft Entra ID, SAP S/4HANA | Medium | Closed | Ananya Rao | REM-F-RBI-05 · Closed | Validated |