33 tests
As of 9 Oct 2026
As of 9 Oct 2026
| Test | Control | Cycle | Tested | By | Result | Confidence |
|---|---|---|---|---|---|---|
| TST-ISO-BCP-01 | BCP-01 · Backup restore and DR are tested | Q3 2026 Unified Program Review | 7 Oct 2026 | Suresh Pillai · Northgate Certification Services | Pass | High |
| TST-ITGC-ACC-02 | ACC-02 · User access provisioning is approved before grant | Q3 2026 Unified Program Review | 7 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit | Pass | High |
| TST-ITGC-P2P-02 | P2P-02 · Vendor master changes require dual control | Q3 2026 Unified Program Review | 7 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit | Pass | High |
| TST-RBI-OPS-01 | OPS-01 · Backups are performed daily and monitored | Q3 2026 Unified Program Review | 7 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit (IS Audit cell) | Pass | High |
| TST-ITGC-P2P-01 | P2P-01 · Purchase orders follow approval thresholds; no self-approval | Q3 2026 Unified Program Review | 6 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit | Fail | Medium |
| TST-RBI-CHG-01 | CHG-01 · Production code changes are peer-reviewed and approved | Q3 2026 Unified Program Review | 6 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit (IS Audit cell) | Pass | High |
| TST-RBI-PAY-02 | PAY-02 · Payment release requires maker-checker | Q3 2026 Unified Program Review | 6 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit (IS Audit cell) | Pass | High |
| TST-ITGC-PAY-02 | PAY-02 · Payment release requires maker-checker | Q3 2026 Unified Program Review | 5 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit | Pass | High |
| TST-ITGC-SOD-01 | SOD-01 · Segregation of incompatible duties in SAP | Q3 2026 Unified Program Review | 5 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit | Fail | Medium |
| TST-RBI-PAY-01 | PAY-01 · Payment APIs secured with mTLS, signing and customer 2FA | Q3 2026 Unified Program Review | 5 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit (IS Audit cell) | Pass | High |
| TST-RBI-SOD-01 | SOD-01 · Segregation of incompatible duties in SAP | Q3 2026 Unified Program Review | 5 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit (IS Audit cell) | Fail | Medium |
| TST-ITGC-JML-02 | JML-02 · Mover access is recertified on role change | Q3 2026 Unified Program Review | 4 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit | Fail | High |
| TST-ITGC-OPS-01 | OPS-01 · Backups are performed daily and monitored | Q3 2026 Unified Program Review | 4 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit | Pass | High |
| TST-RBI-JML-02 | JML-02 · Mover access is recertified on role change | Q3 2026 Unified Program Review | 4 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit (IS Audit cell) | Fail | High |
| TST-RBI-KYC-01 | KYC-01 · Customer accounts are activated only with complete KYC | Q3 2026 Unified Program Review | 4 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit (IS Audit cell) | Fail | Medium |
| TST-ITGC-CHG-03 | CHG-03 · Developers have no standing production access; deployments via pipeline only | Q3 2026 Unified Program Review | 3 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit | Pass | High |
| TST-ITGC-JML-01 | JML-01 · Leavers are de-provisioned within 24 hours | Q3 2026 Unified Program Review | 3 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit | Pass | High |
| TST-RBI-ACC-01 | ACC-01 · MFA and SSO enforced for workforce access | Q3 2026 Unified Program Review | 3 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit (IS Audit cell) | Pass | High |
| TST-RBI-VEN-03 | VEN-03 · Supplier security incidents are assessed for impact and tracked | Q3 2026 Unified Program Review | 3 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit (IS Audit cell) | Fail | High |
| TST-SOC2-ACC-01 | ACC-01 · MFA and SSO enforced for workforce access | Q3 2026 Unified Program Review | 3 Oct 2026 | Laura Bennett · Kestrel Assurance LLP | Pass | High |
| TST-SOC2-ACC-02 | ACC-02 · User access provisioning is approved before grant | Q3 2026 Unified Program Review | 3 Oct 2026 | Laura Bennett · Kestrel Assurance LLP | Pass | High |
| TST-SOC2-CHG-01 | CHG-01 · Production code changes are peer-reviewed and approved | Q3 2026 Unified Program Review | 3 Oct 2026 | Laura Bennett · Kestrel Assurance LLP | Pass | High |
| TST-SOC2-CHG-02 | CHG-02 · Emergency changes are retrospectively approved | Q3 2026 Unified Program Review | 3 Oct 2026 | Laura Bennett · Kestrel Assurance LLP | Fail | High |
| TST-SOC2-ENC-01 | ENC-01 · Customer and payment data encrypted at rest and in transit | Q3 2026 Unified Program Review | 3 Oct 2026 | Laura Bennett · Kestrel Assurance LLP | Pass | High |
| TST-SOC2-JML-01 | JML-01 · Leavers are de-provisioned within 24 hours | Q3 2026 Unified Program Review | 3 Oct 2026 | Laura Bennett · Kestrel Assurance LLP | Pass | High |
| TST-SOC2-JML-02 | JML-02 · Mover access is recertified on role change | Q3 2026 Unified Program Review | 3 Oct 2026 | Laura Bennett · Kestrel Assurance LLP | Fail | High |
| TST-SOC2-LOG-01 | LOG-01 · Security events are centrally logged and monitored 24x7 | Q3 2026 Unified Program Review | 3 Oct 2026 | Laura Bennett · Kestrel Assurance LLP | Pass | High |
| TST-SOC2-OPS-01 | OPS-01 · Backups are performed daily and monitored | Q3 2026 Unified Program Review | 3 Oct 2026 | Laura Bennett · Kestrel Assurance LLP | Pass | High |
| TST-ITGC-ACC-03 | ACC-03 · Privileged access is just-in-time and reviewed | Q3 2026 Unified Program Review | 2 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit | Fail | Medium |
| TST-ITGC-CHG-01 | CHG-01 · Production code changes are peer-reviewed and approved | Q3 2026 Unified Program Review | 2 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit | Pass | High |
| TST-RBI-GOV-01 | GOV-01 · IT Strategy Committee oversees IT and cyber risk | Q3 2026 Unified Program Review | 2 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit (IS Audit cell) | Pass | High |
| TST-RBI-VEN-01 | VEN-01 · Critical third parties are risk-assessed before onboarding and annually | Q3 2026 Unified Program Review | 2 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit (IS Audit cell) | Fail | Medium |
| TST-RBI-BCP-01 | BCP-01 · Backup restore and DR are tested | Q3 2026 Unified Program Review | 1 Oct 2026 | Vikram Mehta, Farah Khan · Meridian Internal Audit (IS Audit cell) | Pass | High |