5 findings
As of 9 Oct 2026
As of 9 Oct 2026
| Finding | Observation | Control | Applications | Severity | Status | Owner | Action | Validation |
|---|---|---|---|---|---|---|---|---|
| F-ITGC-01 | Unmitigated SoD conflict: payments approval and GL posting held by transferred employee | SOD-01 | SAP S/4HANA | High | In Progress | Priya Sharma | REM-F-ITGC-01 · In Progress | Pending |
| F-ITGC-03 | Purchase order released by requester above delegation threshold | P2P-01 | SAP S/4HANA | High | Open | Priya Sharma | REM-F-ITGC-03 · In Progress | Pending |
| F-RBI-01 | Access of transferred staff not revoked — SoD breach in payment approval (MD-ITGRCA §7.1) | SOD-01 | SAP S/4HANA | High | In Progress | Priya Sharma | REM-F-RBI-01 · In Progress | Pending |
| F-RBI-03 | Payment provider incident — incomplete credential rotation | VEN-03 | PayGate Payment Gateway, Meridian Customer Portal | High | In Progress | Deepa Menon | REM-F-RBI-03 · In Progress | Pending |
| F-RBI-04 | Credit line activated before KYC completion (KYC MD §16) | KYC-01 | Meridian Customer Portal, Salesforce (Sales + Financial Services Cloud) | High | Open | Arjun Kapoor | REM-F-RBI-04 · In Progress | Pending |