4 findings
As of 9 Oct 2026
As of 9 Oct 2026
Filtered byDomain: Change Management ✕
| Finding | Observation | Control | Applications | Severity | Status | Owner | Action | Validation |
|---|---|---|---|---|---|---|---|---|
| F-IAQ2-CHG-03 | Developers held standing production access | CHG-03 | Amazon Web Services (ap-south-1), GitHub Enterprise Cloud | High | Closed | Aditya Singh | REM-F-IAQ2-CHG-03 · Closed | Validated |
| F-IAQ2-CHG-01 | Portal changes merged without second reviewer | CHG-01 | GitHub Enterprise Cloud, Meridian Customer Portal | Medium | Closed | Aditya Singh | REM-F-IAQ2-CHG-01 · Closed | Validated |
| F-IAQ2-CHG-02 | Emergency changes without retrospective CAB approval | CHG-02 | GitHub Enterprise Cloud, ServiceNow ITSM | Medium | Closed | Aditya Singh | REM-F-IAQ2-CHG-02 · Closed | Failed |
| F-SOC2-01 | Emergency changes deployed without timely CAB approval | CHG-02 | GitHub Enterprise Cloud, ServiceNow ITSM | Medium | Closed | Aditya Singh | REM-F-SOC2-01 · Closed | Validated |