Meridian Alpha
Overview
Q3 2026 Unified Program Review
As of 9 Oct 2026
As of 9 Oct 2026
Filters
Controls tested
i
Controls tested
Controls tested in the current audit cycle, out of the controls in scope.
- Period
- Q3 2026
- Filters
- SAP S/4HANA
- Updated
- 9 Oct 2026
- Source
- Meridian Alpha · assurance records (tests, findings, actions, validations, evidence)
8/10
80% of scope
Controls effective
i
Controls effective
Tested controls rated effective, as a share of all controls tested.
- Period
- Q3 2026
- Filters
- SAP S/4HANA
- Updated
- 9 Oct 2026
- Source
- Meridian Alpha · assurance records (tests, findings, actions, validations, evidence)
50%
4 effective · 0 with observation
+17 pts vs Q2 2026
Open findings
i
Open findings
Findings not yet closed.
- Period
- All cycles
- Filters
- SAP S/4HANA
- Updated
- 9 Oct 2026
- Source
- Meridian Alpha · assurance records (tests, findings, actions, validations, evidence)
5
3 high · 2 medium
6 raised in Q3 2026 vs 6
Open actions
i
Open actions
Remediation actions not yet closed. Overdue means past the target date.
- Period
- All cycles
- Filters
- SAP S/4HANA
- Updated
- 9 Oct 2026
- Source
- Meridian Alpha · assurance records (tests, findings, actions, validations, evidence)
5
0 overdue · 3 owner teams
Validations passed
i
Validations passed
Retests of completed remediation. Failed means the fix did not hold.
- Period
- All cycles
- Filters
- SAP S/4HANA
- Updated
- 9 Oct 2026
- Source
- Meridian Alpha · assurance records (tests, findings, actions, validations, evidence)
4/12
2 failed · 6 pending
Evidence approved
i
Evidence approved
Evidence reviewed and approved, out of all evidence collected.
- Period
- All cycles
- Filters
- SAP S/4HANA
- Updated
- 9 Oct 2026
- Source
- Meridian Alpha · assurance records (tests, findings, actions, validations, evidence)
70%
38 of 54 · all cycles · 9 in review
Control testing results by domain · Q3 2026
Internal controlsEffectiveEffective with observationIneffective
Summary9 Oct 2026- 4 of 8 controls failed testing in Q3 2026 (5 in Q2 2026); 3 high-severity findings are open.
- 2 remediations failed retest; 6 retests are pending.
- SAP S/4HANA has the most open findings; Priya Sharma holds the most open actions.
- Continuous monitoring last ran on 9 Oct 2026.
Findings by severity
All findingsHighMediumLow
Q2 20266
Q3 20266
Open findings by application
Open findings
Open actions by owner
ActionsOpen actions
Top open issues
All open findings| Issue | Control | Rating | Owner | Due | Status |
|---|---|---|---|---|---|
| Unmitigated SoD conflict: payments approval and GL posting held by transferred employee | SOD-01 | High | Priya Sharma | 10 Oct 2026 | In Progress |
| Purchase order released by requester above delegation threshold | P2P-01 | High | Priya Sharma | 20 Oct 2026 | In Progress |
| Access of transferred staff not revoked — SoD breach in payment approval (MD-ITGRCA §7.1) | SOD-01 | High | Priya Sharma | 5 Nov 2026 | In Progress |
| Standing privileged access in production AWS | ACC-03 | Medium | Rahul Nair | 16 Oct 2026 | In Progress |
| Mover access not removed timely (deviation in CC6.2 testing) | JML-02 | Medium | Neha Iyer | 31 Oct 2026 | Open |
Remediation status
12
actions
- Closed 758%
- In progress 433%
- Open 18%
Actions due by month
View4Oct 2026
1Nov 2026
OpenIn progress0 overdue
Continuous monitoring
Security & access8findings on 8 of 27 controls
Last run 9 Oct 2026
0 controls with no run recorded
Regulatory change
RegulatoryRBI · Strengthening cyber resilience and digital payment security for regulated entities
6 controls affected · 3 gaps · effective 1 Apr 2027
Third-party
Third partyPayGate Payments Pvt. Ltd. · Security incident PG-SEC-2026-014
3 applications · 2 of 4 actions validated