Meridian Alpha

Records

FindingsActionsValidationsEvidenceTestsControlsMonitoring
28 actions
As of 9 Oct 2026
ActionFindingControlOwnerPriorityTargetStatusValidation
REM-F-IAQ2-ACC-02F-IAQ2-ACC-02 · Access granted in SAP without recorded approvalACC-02Ananya RaoHigh31 Jul 2026ClosedValidated
REM-F-IAQ2-ACC-03F-IAQ2-ACC-03 · Standing privileged access in Entra and AWSACC-03Ananya RaoHigh31 Jul 2026ClosedFailed
REM-F-IAQ2-ACC-04F-IAQ2-ACC-04 · Salesforce user access review not completedACC-04Ananya RaoMedium31 Jul 2026ClosedPending
REM-F-IAQ2-BCP-01F-IAQ2-BCP-01 · Restore test evidence incompleteBCP-01Rahul NairMedium31 Jul 2026ClosedValidated
REM-F-IAQ2-CHG-01F-IAQ2-CHG-01 · Portal changes merged without second reviewerCHG-01Aditya SinghMedium31 Jul 2026ClosedValidated
REM-F-IAQ2-CHG-02F-IAQ2-CHG-02 · Emergency changes without retrospective CAB approvalCHG-02Aditya SinghMedium31 Jul 2026ClosedFailed
REM-F-IAQ2-CHG-03F-IAQ2-CHG-03 · Developers held standing production accessCHG-03Aditya SinghHigh31 Jul 2026ClosedValidated
REM-F-IAQ2-JML-01F-IAQ2-JML-01 · Leaver de-provisioning occasionally exceeds 24 hoursJML-01Neha IyerMedium31 Jul 2026ClosedValidated
REM-F-IAQ2-KYC-01F-IAQ2-KYC-01 · KYC document checks performed after account activationKYC-01Arjun KapoorMedium31 Jul 2026ClosedFailed
REM-F-IAQ2-LOG-01F-IAQ2-LOG-01 · Customer portal not onboarded to the SIEMLOG-01Ananya RaoMedium31 Jul 2026ClosedValidated
REM-F-IAQ2-OPS-01F-IAQ2-OPS-01 · Failed backup jobs not followed upOPS-01Rahul NairMedium31 Jul 2026ClosedValidated
REM-F-IAQ2-P2P-01F-IAQ2-P2P-01 · Purchase orders released above delegated thresholdP2P-01Priya SharmaHigh31 Jul 2026ClosedFailed
REM-F-IAQ2-PAY-01F-IAQ2-PAY-01 · Bulk payout API accepted requests without customer 2FAPAY-01Deepa MenonHigh31 Jul 2026ClosedValidated
REM-F-IAQ2-SOD-01F-IAQ2-SOD-01 · Unmitigated SAP SoD conflictsSOD-01Priya SharmaHigh31 Jul 2026ClosedValidated
REM-F-IAQ2-VEN-01F-IAQ2-VEN-01 · Critical vendor reassessments not trackedVEN-01Sanjay KulkarniMedium31 Jul 2026ClosedFailed
REM-F-IAQ2-VUL-01F-IAQ2-VUL-01 · Critical vulnerabilities past remediation SLAVUL-01Ananya RaoHigh31 Jul 2026ClosedPending
REM-F-RBI-05F-RBI-05 · Privileged access to production previously standing (MD-ITGRCA §7.1)ACC-03Ananya RaoMedium27 Aug 2026ClosedValidated
REM-F-ITGC-01F-ITGC-01 · Unmitigated SoD conflict: payments approval and GL posting held by transferred employeeSOD-01Priya SharmaHigh10 Oct 2026In ProgressPending
REM-F-RBI-03F-RBI-03 · Payment provider incident — incomplete credential rotationVEN-03Deepa MenonHigh10 Oct 2026In ProgressPending
REM-F-ISO-01F-ISO-01 · SAP HANA restore test exceeded RTO (internal ISMS audit, carried into surveillance)BCP-01Rahul NairMedium16 Oct 2026ClosedValidated
REM-F-ITGC-02F-ITGC-02 · Standing privileged access in production AWSACC-03Rahul NairMedium16 Oct 2026In ProgressPending
REM-F-SOC2-01F-SOC2-01 · Emergency changes deployed without timely CAB approvalCHG-02Aditya SinghMedium19 Oct 2026ClosedValidated
REM-F-ITGC-03F-ITGC-03 · Purchase order released by requester above delegation thresholdP2P-01Priya SharmaHigh20 Oct 2026In ProgressPending
REM-F-RBI-02F-RBI-02 · Material outsourcing: lapsed assurance and overdue reassessment (Outsourcing of IT Services 2023 §6/§9)VEN-01Sanjay KulkarniMedium20 Oct 2026OpenPending
REM-F-RBI-04F-RBI-04 · Credit line activated before KYC completion (KYC MD §16)KYC-01Arjun KapoorHigh22 Oct 2026In ProgressPending
REM-F-ISO-02F-ISO-02 · Supplier agreement lacks information security clauses (A.5.20)VEN-02Sanjay KulkarniMedium31 Oct 2026In ProgressPending
REM-F-SOC2-02F-SOC2-02 · Mover access not removed timely (deviation in CC6.2 testing)JML-02Neha IyerMedium31 Oct 2026OpenPending
REM-F-RBI-01F-RBI-01 · Access of transferred staff not revoked — SoD breach in payment approval (MD-ITGRCA §7.1)SOD-01Priya SharmaHigh5 Nov 2026In ProgressPending