4 findings
As of 9 Oct 2026
As of 9 Oct 2026
Filtered byApplication: PayGate Payment Gateway ✕
| Finding | Observation | Control | Applications | Severity | Status | Owner | Action | Validation |
|---|---|---|---|---|---|---|---|---|
| F-RBI-03 | Payment provider incident — incomplete credential rotation | VEN-03 | PayGate Payment Gateway, Meridian Customer Portal | High | In Progress | Deepa Menon | REM-F-RBI-03 · In Progress | Pending |
| F-RBI-02 | Material outsourcing: lapsed assurance and overdue reassessment (Outsourcing of IT Services 2023 §6/§9) | VEN-01 | PayGate Payment Gateway, Salesforce (Sales + Financial Services Cloud) | Medium | Open | Sanjay Kulkarni | REM-F-RBI-02 · Open | Pending |
| F-IAQ2-PAY-01 | Bulk payout API accepted requests without customer 2FA | PAY-01 | PayGate Payment Gateway, Meridian Customer Portal | High | Closed | Deepa Menon | REM-F-IAQ2-PAY-01 · Closed | Validated |
| F-IAQ2-VEN-01 | Critical vendor reassessments not tracked | VEN-01 | PayGate Payment Gateway, Salesforce (Sales + Financial Services Cloud) | Medium | Closed | Sanjay Kulkarni | REM-F-IAQ2-VEN-01 · Closed | Failed |