1
muratov.io — ITGC Audit Automation Platform
IT General Controls
Workpaper Documentation
Apex Financial Group
FY2026 IT General Controls Audit
Audit Period: 1 Jan 2026 – 31 Dec 2026
WP-APXFG-2026-ITGC-MASTER
Operated Effectively with Exceptions
Controls
8 controls tested
Systems
6 in scope
Categories
Access Management, Change Management, IT Operations, Information Security
Effectiveness
5 of 8 clean (3 with exceptions)
Prepared by
Sarah Kim, CPA
sarah.kim@apexfinancial.com
Signed off: 10 Apr 2027
FINALIZED Generated: 15 Dec 2026, 18:30 UTC
Methodology aligned with AICPA AU-C 530 (Audit Sampling) • AU-C 940 (ICFR Audit) • AU-C 230 (Audit Documentation). Parallel reference for PCAOB-regulated engagements: AS 2315 • AS 2201.
Table of Contents
Executive Summary 2
AICPA AU-C 940 — An Audit of Internal Control Over Financial Reporting Integrated With an Audit of Financial Statements
Overall Conclusion
Operated Effectively with Exceptions

Based on our testing of 8 IT General Controls across 6 systems in scope, covering the period 1 Jan 2026 through 31 Dec 2026, we conclude that the entity's IT General Controls operated effectively with exceptions during the period. A total of 4 exceptions were identified during testing. Sampling was performed using a random-selection method with cryptographic seeding for reproducibility.

Exceptions identified during testing did not rise to Significant Deficiency or Material Weakness severity per the AICPA AU-C 940 deficiency-evaluation framework; remediation completed within the period and accepted-risk carve-outs are documented in §9 Exception Summary. The controls operated effectively despite the noted Control Deficiencies.

Controls Tested: 8
Clean Pass: 5 of 8 (62.5%)
Exceptions: 4 (0 critical)
Quality Review: 48 (48 passed)
Data Integrity: 1624 (1620 passed)
8
Total Controls
62.5%Initial Pass Rate (5 of 8)
Initial Pass
100%Resolved Rate (8 of 8)
Resolved
3
Pass w/ Exceptions
0
Failed
0
In Progress
8
Signed Off
4
Exceptions
1,726
Population Items
609
Samples Tested

Initial Pass Rate counts controls with no in-period exceptions. Resolved Rate counts Initial controls plus controls where every exception was remediated, accepted as risk per policy, or closed within the audit period.

AI Technology Disclosure

This engagement utilized AI-assisted testing powered by the Anthropic Claude API. All AI-generated test results were subject to mandatory auditor review before acceptance. AI determinations that were rejected by the auditor are documented with override rationale. The use of AI does not diminish the auditor’s professional responsibility or judgment.

AI inference: Anthropic Claude API (US; no model training on customer data, per Anthropic's commercial-API terms — 7-day API log retention). See trust.anthropic.com for Anthropic’s own compliance disclosures, including SOC 2 reports and API data-handling commitments. For muratov.io’s full sub-processor list, see muratov.io/security.

Standards citations throughout this workpaper are platform-selected informational references to topical professional literature. The signing auditor is responsible for verifying citation appropriateness for the specific engagement and the engagement’s professional-standards framework.

Ref: PCAOB Staff Guidance on Technology-Assisted Analysis in Auditing

Scope Memo:

Scope covers core financial-reporting IT systems hosted in AWS us-east-1 + Azure East US 2 for the fiscal year ending 31 December 2026. Areas tested: Access (User Access Management, Quarterly UARs, Cloud IAM), Change (Production Change Management, Release Controls), Operations (Backup Management, Production Monitoring), Security (Vulnerability Management). Out-of-scope: subsidiary entities reporting under separate audit engagements; physical-access controls (covered under separate FY2026 SOC 2 audit); end-user workstation controls; mobile-device management. Testing methodology: AICPA AU-C 530 (Audit Sampling) + AU-C 940 (ICFR Audit) risk-based sample sizing; evidence-first testing with AI-assisted attribute verification + auditor review on all AI results. ψ.12 Bundle F-6 Task 6.4 (F-01 + F-21 fix): This is a single-auditor engagement. Per AICPA AU-C 940, engagement quality review (EQR) is required by PCAOB AS 1220 for issuer (public company) audits; AS 1220 does not extend to AICPA AU-C nonissuer engagements such as this one. The preparer (Sarah Kim, CPA) performed all testing, exception evaluation, and conclusion-formation; review responsibilities consolidated with preparer per the engagement-letter §3.2 single-auditor clause.

Scope & Systems 3
AICPA AU-C 315 — Understanding the Entity and Its Environment
Areas in Scope: access change operations security
System Name Type Category Environment Owner Controls
Okta IAM Access Management Production Identity Team 2
GitHub Enterprise VCS Change Management Production Platform Engineering 2
Jira Software Change Mgmt Change Management Production Engineering Operations 1
AWS Production Account Cloud Access Management, IT Operations Production Cloud Infrastructure 2
Datadog Monitoring IT Operations Production SRE 1
Wiz Cloud Security Security Information Security Production Security Engineering 1
Scope Gap Justifications 4
AICPA AU-C 940 — Scope and Coverage Decisions

No Scope Gaps

All controls required for in-scope systems have been selected.

Controls Matrix 5
AICPA AU-C 940 — Identifying and Selecting Controls to Test • COSO 2013 Internal Control Framework
Code Control Name Category System COSO Component SOX 404 SOC 2 TSC Status Conclusion
A1 User Provisioning Approvals Access Management Okta Control Activities (P10) KeyH CC6.1
security
Effective with ExceptionsLocked Pass
A6 User Access Reviews (UAR) Access Management Okta Monitoring (P16) KeyH CC6.2
security
EffectiveLocked Pass
A9 Cloud IAM Policy and Identity Review Access Management AWS Production Account Control Activities (P10) KeyH CC6.1
security
EffectiveLocked Pass
C1 Normal Change Approvals Change Management GitHub Enterprise Control Activities (P11) KeyH CC8.1
processing integrity
Effective with ExceptionsLocked Pass With Exceptions
C3 Release Controls Change Management GitHub Enterprise Control Activities (P11) KeyH CC8.1
processing integrity
EffectiveLocked Pass
O1 Backup Success Monitoring IT Operations AWS Production Account Control Activities (P11) KeyH A1.2
availability
EffectiveLocked Pass
O4 Monitoring & Alert Response IT Operations Datadog Monitoring (P16) non-keyM A1.1
availability
Effective with ExceptionsLocked Pass With Exceptions
S3 Vulnerability Management Information Security Wiz Cloud Security Monitoring (P16) KeyH CC7.1
security
EffectiveLocked Pass
Population & Sampling Documentation 6
AICPA AU-C 530 — Audit Sampling
Control Population Name Source System Total Count Risk Level AICPA Basis Sample Method Sample Size Seed
A1 FY2026 New-Hire Provisioning Tickets Okta + ServiceNow 412 HIGH Per firm IT-Audit Methodology v3.1, §SAM-04 (tolerable-deviation-rate matrix) random 100 sha256:e75ab0631376622036523a6783417992
A6 Quarterly Access Certification Sessions Okta UAR Module 88 MEDIUM Per firm IT-Audit Methodology v3.1, §SAM-04 (tolerable-deviation-rate matrix) random 45 sha256:7d8e641918b51931b041196ddbb01c21
A9 AWS IAM Policies Reviewed AWS Production Account 156 MEDIUM Per firm IT-Audit Methodology v3.1, §SAM-04 (tolerable-deviation-rate matrix) random 58 sha256:f9a9d1ea39cd83b4a45a98f2dc241919
C1 Production Change Tickets Jira + GitHub 287 HIGH Per firm IT-Audit Methodology v3.1, §SAM-04 (tolerable-deviation-rate matrix) random 100 sha256:49244207ea72d0233e92d3339bab8e0b
C3 Production Releases GitHub Enterprise Releases 142 MEDIUM Per firm IT-Audit Methodology v3.1, §SAM-04 (tolerable-deviation-rate matrix) random 58 sha256:a05ed46ebe6c085b35fd62e44b55d83a
O1 Production Database Daily Backups AWS Backup + RDS Snapshots 365 HIGH Per firm IT-Audit Methodology v3.1, §SAM-04 (tolerable-deviation-rate matrix) random 100 sha256:d26768efa146380a1aa0ac27d008d94f
O4 Production Incidents Datadog + PagerDuty 184 MEDIUM Per firm IT-Audit Methodology v3.1, §SAM-04 (tolerable-deviation-rate matrix) random 58 sha256:f142af788c5ef8d96dcd57b685d5b432
S3 High/Critical Vulnerabilities Wiz + Snyk 92 HIGH Per firm IT-Audit Methodology v3.1, §SAM-04 (tolerable-deviation-rate matrix) random 90 sha256:d37acabf19af9fe6cd8f6ea2755b2a1a
Note: All sampling uses cryptographic seeding for reproducibility. Samples can be regenerated using the documented seed values.

Sample-Size Determination Worksheet

Sample-size determination factors per AICPA AU-C 530 — Audit Sampling: tolerable deviation rate (TDR), expected deviation rate (EDR), risk of overreliance. Per firm IT-Audit Methodology v3.1 §SAM-04, sample size selected from the firm’s tolerable-deviation-rate matrix.

Control Risk Level TDR EDR Risk of Overreliance Sample Size Items Tested
A1HIGH10%2%5%100100
A6MEDIUM15%3%10%4545
A9MEDIUM15%2%10%5858
C1HIGH10%1%5%100100
C3MEDIUM15%2%10%5858
O1HIGH10%2%5%100100
O4MEDIUM15%4%10%5858
S3HIGH10%3%5%9090
Testing Results by Control 7
AICPA AU-C 500 — Audit Evidence

Testing Methodology

Testing was performed using an Evidence-First approach: evidence documents are mapped to sample items and control attributes before AI-assisted analysis is executed. Each sample item is tested against all defined acceptance criteria (attributes) with results subject to mandatory auditor review.

Sampling: Per AICPA AU-C 530 / PCAOB AS 2315, samples were selected using random selection method with cryptographic seeding for full reproducibility. All seeds are documented in Section 6.

Risk Level Sample Size (AICPA) Basis
Low5–15Reduced testing, strong prior-year reliance
Medium15–25Standard testing, moderate reliance
High25–40+Extended testing, limited/no reliance

AI Disclosure: AI-assisted testing was performed using Anthropic Claude models. All AI results are subject to mandatory auditor review before acceptance. Confidence scores and auditor override status are documented in the AI Provenance section below each control.

Acceptance Criteria Summary

Control Acceptance Criteria Testing Complete Evidence Mappings Status
A1 User Provisioning Approvals Request Documentation, Manager Approval, Timely Provisioning, Role Appropriateness Yes 400 (100 samples) Effective with Exceptions
A6 User Access Reviews (UAR) Coverage, Timely Completion, Action on Exceptions Yes 135 (45 samples) Effective
A9 Cloud IAM Policy and Identity Review Policy Not Over-Permissive, Identity Used Recently, MFA Enforced, Service Account Key Rotated, Cross-Account Trust Reviewed, Privileged Role Elevation Logged, Access Analyzer Completed Yes 406 (58 samples) Effective
C1 Normal Change Approvals Change Request, Approval, Testing Evidence, Implementation Evidence Yes 400 (100 samples) Effective with Exceptions
C3 Release Controls Release Approval, Test Sign-off Yes 116 (58 samples) Effective
O1 Backup Success Monitoring Backup Success, Failure Resolution Yes 200 (100 samples) Effective
O4 Monitoring & Alert Response Timely Response, Resolution Yes 116 (58 samples) Effective with Exceptions
S3 Vulnerability Management Scanning Coverage, Timely Remediation, Exception Management, Validation Scanning Yes 360 (90 samples) Effective
Note: All acceptance criteria must be met and evidenced for controls to receive a "Pass" status.
A1 User Provisioning Approvals Locked
Effective with Exceptions
WP-Ref: WP-APXFG-2026-ITGC-A1 | System: Okta | Category: Access Management | Population: 412 | Samples: 100 | Signed off by: Sarah Kim, CPA on 15 Mar 2027

Verifies that new user account requests are properly approved before access is granted.

CONCLUSION NARRATIVE:

We tested user-access provisioning controls covering the period 1 January 2026 through 31 December 2026 for Apex Financial Group's in-scope financial-reporting systems. The population comprises 412 new-hire and role-change provisioning tickets recorded in Okta and ServiceNow; we selected 100 sample items using a random-selection method consistent with the firm's sample-size methodology guide §SAM-04 (10% tolerable deviation rate, 2% expected deviation rate, 5% risk of overreliance for HIGH-risk access controls). Sample selection drew from the complete population list under audit-team control without subject-area exclusions. Testing results: 98 of 100 sampled tickets met all four control attributes — request documentation present, manager approval recorded, timely provisioning within the joiner SLA, and role appropriateness matching the Job Role Matrix v2.1. Two sample items (OKTA-PROV-2026-0149 raised 28 February 2026 and OKTA-PROV-2026-0163 raised 8 March 2026) failed the Timely Provisioning attribute: manager approval was recorded one and two business days after the hire-date SLA respectively (an approval-sequencing deviation), which deferred provisioning past the SLA window; manager approval itself was present in both cases. The observed deviation rate is 2 of 100 (2.0%), which is below the 10% tolerable deviation rate established for this control's risk profile; the sample size follows the firm's §SAM-04 tolerable-deviation-rate matrix for this risk profile. Exception analysis: both deviations share a single root cause — a missing backup-approver configuration in the Okta access-request workflow that surfaced when managers were on PTO. Remediation deployed effective 15 March 2026 added a default backup approver to every access-request approval chain per the engineering org structure; both exception tickets closed by 20 March 2026 with no recurrence during the remaining 9.5 months of the audit period. Per the AICPA AU-C 940 deficiency-evaluation framework, these deviations rise to a Control Deficiency (in-period remediation, narrow scope, immaterial financial-reporting impact) but do not constitute a Significant Deficiency or Material Weakness. We conclude the control operated effectively during the period 1 January 2026 – 31 December 2026 in all material respects relevant to the entity's IT General Controls over financial reporting.

ATTRIBUTE-LEVEL TESTING RESULTS:
Sample Request Documentation Manager Approval Timely Provisioning Role Appropriateness Evidence
OKTA-PROV-2026-0145 4 file(s)
OKTA-PROV-2026-0146 4 file(s)
OKTA-PROV-2026-0147 4 file(s)
OKTA-PROV-2026-0148 4 file(s)
OKTA-PROV-2026-0149 4 file(s)
OKTA-PROV-2026-0150 4 file(s)
OKTA-PROV-2026-0151 4 file(s)
OKTA-PROV-2026-0152 4 file(s)
OKTA-PROV-2026-0153 4 file(s)
OKTA-PROV-2026-0154 4 file(s)
OKTA-PROV-2026-0155 4 file(s)
OKTA-PROV-2026-0156 4 file(s)
OKTA-PROV-2026-0157 4 file(s)
OKTA-PROV-2026-0158 4 file(s)
OKTA-PROV-2026-0159 4 file(s)
OKTA-PROV-2026-0160 4 file(s)
OKTA-PROV-2026-0161 4 file(s)
OKTA-PROV-2026-0162 4 file(s)
OKTA-PROV-2026-0163 4 file(s)
OKTA-PROV-2026-0164 4 file(s)
OKTA-PROV-2026-0165 4 file(s)
OKTA-PROV-2026-0166 4 file(s)
OKTA-PROV-2026-0167 4 file(s)
OKTA-PROV-2026-0168 4 file(s)
OKTA-PROV-2026-0169 4 file(s)
OKTA-PROV-2026-0170 4 file(s)
OKTA-PROV-2026-0171 4 file(s)
OKTA-PROV-2026-0172 4 file(s)
OKTA-PROV-2026-0173 4 file(s)
OKTA-PROV-2026-0174 4 file(s)
OKTA-PROV-2026-0175 4 file(s)
OKTA-PROV-2026-0176 4 file(s)
OKTA-PROV-2026-0177 4 file(s)
OKTA-PROV-2026-0178 4 file(s)
OKTA-PROV-2026-0179 4 file(s)
OKTA-PROV-2026-0180 4 file(s)
OKTA-PROV-2026-0181 4 file(s)
OKTA-PROV-2026-0182 4 file(s)
OKTA-PROV-2026-0183 4 file(s)
OKTA-PROV-2026-0184 4 file(s)
OKTA-PROV-2026-0185 4 file(s)
OKTA-PROV-2026-0186 4 file(s)
OKTA-PROV-2026-0187 4 file(s)
OKTA-PROV-2026-0188 4 file(s)
OKTA-PROV-2026-0189 4 file(s)
OKTA-PROV-2026-0190 4 file(s)
OKTA-PROV-2026-0191 4 file(s)
OKTA-PROV-2026-0192 4 file(s)
OKTA-PROV-2026-0193 4 file(s)
OKTA-PROV-2026-0194 4 file(s)
OKTA-PROV-2026-0195 4 file(s)
OKTA-PROV-2026-0196 4 file(s)
OKTA-PROV-2026-0197 4 file(s)
OKTA-PROV-2026-0198 4 file(s)
OKTA-PROV-2026-0199 4 file(s)
OKTA-PROV-2026-0200 4 file(s)
OKTA-PROV-2026-0201 4 file(s)
OKTA-PROV-2026-0202 4 file(s)
OKTA-PROV-2026-0203 4 file(s)
OKTA-PROV-2026-0204 4 file(s)
OKTA-PROV-2026-0205 4 file(s)
OKTA-PROV-2026-0206 4 file(s)
OKTA-PROV-2026-0207 4 file(s)
OKTA-PROV-2026-0208 4 file(s)
OKTA-PROV-2026-0209 4 file(s)
OKTA-PROV-2026-0210 4 file(s)
OKTA-PROV-2026-0211 4 file(s)
OKTA-PROV-2026-0212 4 file(s)
OKTA-PROV-2026-0213 4 file(s)
OKTA-PROV-2026-0214 4 file(s)
OKTA-PROV-2026-0215 4 file(s)
OKTA-PROV-2026-0216 4 file(s)
OKTA-PROV-2026-0217 4 file(s)
OKTA-PROV-2026-0218 4 file(s)
OKTA-PROV-2026-0219 4 file(s)
OKTA-PROV-2026-0220 4 file(s)
OKTA-PROV-2026-0221 4 file(s)
OKTA-PROV-2026-0222 4 file(s)
OKTA-PROV-2026-0223 4 file(s)
OKTA-PROV-2026-0224 4 file(s)
OKTA-PROV-2026-0225 4 file(s)
OKTA-PROV-2026-0226 4 file(s)
OKTA-PROV-2026-0227 4 file(s)
OKTA-PROV-2026-0228 4 file(s)
OKTA-PROV-2026-0229 4 file(s)
OKTA-PROV-2026-0230 4 file(s)
OKTA-PROV-2026-0231 4 file(s)
OKTA-PROV-2026-0232 4 file(s)
OKTA-PROV-2026-0233 4 file(s)
OKTA-PROV-2026-0234 4 file(s)
OKTA-PROV-2026-0235 4 file(s)
OKTA-PROV-2026-0236 4 file(s)
OKTA-PROV-2026-0237 4 file(s)
OKTA-PROV-2026-0238 4 file(s)
OKTA-PROV-2026-0239 4 file(s)
OKTA-PROV-2026-0240 4 file(s)
OKTA-PROV-2026-0241 4 file(s)
OKTA-PROV-2026-0242 4 file(s)
OKTA-PROV-2026-0243 4 file(s)
OKTA-PROV-2026-0244 4 file(s)

Total: 100 samples tested

Legend: ✓ Pass | ✗ Fail | ◐ Inconclusive | ⚠ Warn | ◌ Pending | – Not Tested
AI TESTING PROVENANCE (Evidence-First):
Total AI Results: 400
Samples Tested: 100
Accepted: 388 (2 exceptions)
Overridden: 12
Avg Confidence: 92.7%
<70%: 0
≥90%: 300
Sample Attribute AI Result Confidence Auditor Rationale Model
OKTA-PROV-2026-0145Request DocumentationPASS87%✓ Accepted
by Sarah Kim, CPA on 9 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0145Manager ApprovalPASS90%✓ Accepted
by Sarah Kim, CPA on 19 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0145Timely ProvisioningPASS93%✓ Accepted
by Sarah Kim, CPA on 29 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0145Role AppropriatenessPASS96%✓ Accepted
by Sarah Kim, CPA on 11 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0146Request DocumentationPASS94%✓ Accepted
by Sarah Kim, CPA on 17 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0146Manager ApprovalPASS97%✓ Accepted
by Sarah Kim, CPA on 27 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0146Timely ProvisioningPASS87%✓ Accepted
by Sarah Kim, CPA on 9 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0146Role AppropriatenessPASS90%✓ Accepted
by Sarah Kim, CPA on 19 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0147Request DocumentationPASS88%✓ Accepted
by Sarah Kim, CPA on 25 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0147Manager ApprovalPASS91%✓ Accepted
by Sarah Kim, CPA on 14 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0147Timely ProvisioningPASS94%✓ Accepted
by Sarah Kim, CPA on 17 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0147Role AppropriatenessPASS97%✓ Accepted
by Sarah Kim, CPA on 27 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0148Request DocumentationPASS95%✓ Accepted
by Sarah Kim, CPA on 12 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0148Manager ApprovalPASS98%✓ Accepted
by Sarah Kim, CPA on 22 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0148Timely ProvisioningPASS88%✓ Accepted
by Sarah Kim, CPA on 25 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0148Role AppropriatenessPASS91%✓ Accepted
by Sarah Kim, CPA on 14 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0149Request DocumentationPASS89%✓ Accepted
by Sarah Kim, CPA on 20 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0149Manager ApprovalPASS92%✓ Accepted
by Sarah Kim, CPA on 23 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0149Timely ProvisioningFAIL97%✓ Accepted (Exception)
by Sarah Kim, CPA on 12 Sep 2026, 10:00 UTC
Documented approval timestamp falls 1 business day after the policy SLA window. Pre-deployment approval evidence not located in the sampled ticket trail.claude-haiku-4-5-20251001
OKTA-PROV-2026-0149Role AppropriatenessPASS98%✓ Accepted
by Sarah Kim, CPA on 22 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0150Request DocumentationPASS96%✓ Accepted
by Sarah Kim, CPA on 28 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0150Manager ApprovalPASS99%✓ Accepted
by Sarah Kim, CPA on 10 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0150Timely ProvisioningPASS89%✓ Accepted
by Sarah Kim, CPA on 20 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0150Role AppropriatenessPASS92%✓ Accepted
by Sarah Kim, CPA on 23 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0151Request DocumentationPASS90%✓ Accepted
by Sarah Kim, CPA on 15 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0151Manager ApprovalPASS93%✓ Accepted
by Sarah Kim, CPA on 18 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0151Timely ProvisioningPASS96%✓ Accepted
by Sarah Kim, CPA on 28 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0151Role AppropriatenessPASS99%✓ Accepted
by Sarah Kim, CPA on 10 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0152Request DocumentationPASS97%✓ Accepted
by Sarah Kim, CPA on 16 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0152Manager ApprovalPASS87%✓ Accepted
by Sarah Kim, CPA on 26 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0152Timely ProvisioningPASS90%✓ Accepted
by Sarah Kim, CPA on 15 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0152Role AppropriatenessPASS93%✓ Accepted
by Sarah Kim, CPA on 18 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0153Request DocumentationPASS91%✓ Accepted
by Sarah Kim, CPA on 24 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0153Manager ApprovalPASS94%✓ Accepted
by Sarah Kim, CPA on 13 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0153Timely ProvisioningPASS97%✓ Accepted
by Sarah Kim, CPA on 16 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0153Role AppropriatenessPASS83%↻ Overridden
by Sarah Kim, CPA on 26 Sep 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
OKTA-PROV-2026-0154Request DocumentationPASS98%✓ Accepted
by Sarah Kim, CPA on 11 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0154Manager ApprovalPASS88%✓ Accepted
by Sarah Kim, CPA on 21 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0154Timely ProvisioningPASS83%↻ Overridden
by Sarah Kim, CPA on 24 Sep 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
OKTA-PROV-2026-0154Role AppropriatenessPASS94%✓ Accepted
by Sarah Kim, CPA on 13 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0155Request DocumentationPASS92%✓ Accepted
by Sarah Kim, CPA on 19 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0155Manager ApprovalPASS83%↻ Overridden
by Sarah Kim, CPA on 29 Sep 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
OKTA-PROV-2026-0155Timely ProvisioningPASS98%✓ Accepted
by Sarah Kim, CPA on 11 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0155Role AppropriatenessPASS88%✓ Accepted
by Sarah Kim, CPA on 21 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0156Request DocumentationPASS83%↻ Overridden
by Sarah Kim, CPA on 27 Sep 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
OKTA-PROV-2026-0156Manager ApprovalPASS89%✓ Accepted
by Sarah Kim, CPA on 9 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0156Timely ProvisioningPASS92%✓ Accepted
by Sarah Kim, CPA on 19 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0156Role AppropriatenessPASS95%✓ Accepted
by Sarah Kim, CPA on 29 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0157Request DocumentationPASS93%✓ Accepted
by Sarah Kim, CPA on 14 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0157Manager ApprovalPASS96%✓ Accepted
by Sarah Kim, CPA on 17 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0157Timely ProvisioningPASS99%✓ Accepted
by Sarah Kim, CPA on 27 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0157Role AppropriatenessPASS89%✓ Accepted
by Sarah Kim, CPA on 9 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0158Request DocumentationPASS87%✓ Accepted
by Sarah Kim, CPA on 22 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0158Manager ApprovalPASS90%✓ Accepted
by Sarah Kim, CPA on 25 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0158Timely ProvisioningPASS93%✓ Accepted
by Sarah Kim, CPA on 14 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0158Role AppropriatenessPASS96%✓ Accepted
by Sarah Kim, CPA on 17 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0159Request DocumentationPASS94%✓ Accepted
by Sarah Kim, CPA on 23 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0159Manager ApprovalPASS97%✓ Accepted
by Sarah Kim, CPA on 12 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0159Timely ProvisioningPASS87%✓ Accepted
by Sarah Kim, CPA on 22 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0159Role AppropriatenessPASS90%✓ Accepted
by Sarah Kim, CPA on 25 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0160Request DocumentationPASS88%✓ Accepted
by Sarah Kim, CPA on 10 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0160Manager ApprovalPASS91%✓ Accepted
by Sarah Kim, CPA on 20 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0160Timely ProvisioningPASS94%✓ Accepted
by Sarah Kim, CPA on 23 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0160Role AppropriatenessPASS97%✓ Accepted
by Sarah Kim, CPA on 12 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0161Request DocumentationPASS95%✓ Accepted
by Sarah Kim, CPA on 18 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0161Manager ApprovalPASS98%✓ Accepted
by Sarah Kim, CPA on 28 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0161Timely ProvisioningPASS88%✓ Accepted
by Sarah Kim, CPA on 10 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0161Role AppropriatenessPASS91%✓ Accepted
by Sarah Kim, CPA on 20 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0162Request DocumentationPASS89%✓ Accepted
by Sarah Kim, CPA on 26 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0162Manager ApprovalPASS92%✓ Accepted
by Sarah Kim, CPA on 15 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0162Timely ProvisioningPASS95%✓ Accepted
by Sarah Kim, CPA on 18 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0162Role AppropriatenessPASS98%✓ Accepted
by Sarah Kim, CPA on 28 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0163Request DocumentationPASS96%✓ Accepted
by Sarah Kim, CPA on 13 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0163Manager ApprovalPASS99%✓ Accepted
by Sarah Kim, CPA on 16 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0163Timely ProvisioningFAIL95%✓ Accepted (Exception)
by Sarah Kim, CPA on 26 Sep 2026, 10:00 UTC
Documented approval timestamp falls 1 business day after the policy SLA window. Pre-deployment approval evidence not located in the sampled ticket trail.claude-haiku-4-5-20251001
OKTA-PROV-2026-0163Role AppropriatenessPASS92%✓ Accepted
by Sarah Kim, CPA on 15 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0164Request DocumentationPASS90%✓ Accepted
by Sarah Kim, CPA on 21 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0164Manager ApprovalPASS93%✓ Accepted
by Sarah Kim, CPA on 24 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0164Timely ProvisioningPASS96%✓ Accepted
by Sarah Kim, CPA on 13 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0164Role AppropriatenessPASS99%✓ Accepted
by Sarah Kim, CPA on 16 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0165Request DocumentationPASS97%✓ Accepted
by Sarah Kim, CPA on 29 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0165Manager ApprovalPASS87%✓ Accepted
by Sarah Kim, CPA on 11 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0165Timely ProvisioningPASS90%✓ Accepted
by Sarah Kim, CPA on 21 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0165Role AppropriatenessPASS93%✓ Accepted
by Sarah Kim, CPA on 24 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0166Request DocumentationPASS91%✓ Accepted
by Sarah Kim, CPA on 9 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0166Manager ApprovalPASS94%✓ Accepted
by Sarah Kim, CPA on 19 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0166Timely ProvisioningPASS97%✓ Accepted
by Sarah Kim, CPA on 29 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0166Role AppropriatenessPASS87%✓ Accepted
by Sarah Kim, CPA on 11 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0167Request DocumentationPASS98%✓ Accepted
by Sarah Kim, CPA on 17 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0167Manager ApprovalPASS88%✓ Accepted
by Sarah Kim, CPA on 27 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0167Timely ProvisioningPASS91%✓ Accepted
by Sarah Kim, CPA on 9 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0167Role AppropriatenessPASS94%✓ Accepted
by Sarah Kim, CPA on 19 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0168Request DocumentationPASS92%✓ Accepted
by Sarah Kim, CPA on 25 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0168Manager ApprovalPASS95%✓ Accepted
by Sarah Kim, CPA on 14 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0168Timely ProvisioningPASS98%✓ Accepted
by Sarah Kim, CPA on 17 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0168Role AppropriatenessPASS88%✓ Accepted
by Sarah Kim, CPA on 27 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0169Request DocumentationPASS99%✓ Accepted
by Sarah Kim, CPA on 12 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0169Manager ApprovalPASS89%✓ Accepted
by Sarah Kim, CPA on 22 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0169Timely ProvisioningPASS92%✓ Accepted
by Sarah Kim, CPA on 25 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0169Role AppropriatenessPASS95%✓ Accepted
by Sarah Kim, CPA on 14 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0170Request DocumentationPASS93%✓ Accepted
by Sarah Kim, CPA on 20 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0170Manager ApprovalPASS96%✓ Accepted
by Sarah Kim, CPA on 23 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0170Timely ProvisioningPASS99%✓ Accepted
by Sarah Kim, CPA on 12 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0170Role AppropriatenessPASS89%✓ Accepted
by Sarah Kim, CPA on 22 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0171Request DocumentationPASS87%✓ Accepted
by Sarah Kim, CPA on 28 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0171Manager ApprovalPASS90%✓ Accepted
by Sarah Kim, CPA on 10 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0171Timely ProvisioningPASS93%✓ Accepted
by Sarah Kim, CPA on 20 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0171Role AppropriatenessPASS96%✓ Accepted
by Sarah Kim, CPA on 23 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0172Request DocumentationPASS94%✓ Accepted
by Sarah Kim, CPA on 15 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0172Manager ApprovalPASS97%✓ Accepted
by Sarah Kim, CPA on 18 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0172Timely ProvisioningPASS87%✓ Accepted
by Sarah Kim, CPA on 28 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0172Role AppropriatenessPASS90%✓ Accepted
by Sarah Kim, CPA on 10 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0173Request DocumentationPASS88%✓ Accepted
by Sarah Kim, CPA on 16 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0173Manager ApprovalPASS91%✓ Accepted
by Sarah Kim, CPA on 26 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0173Timely ProvisioningPASS94%✓ Accepted
by Sarah Kim, CPA on 15 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0173Role AppropriatenessPASS97%✓ Accepted
by Sarah Kim, CPA on 18 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0174Request DocumentationPASS95%✓ Accepted
by Sarah Kim, CPA on 24 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0174Manager ApprovalPASS98%✓ Accepted
by Sarah Kim, CPA on 13 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0174Timely ProvisioningPASS88%✓ Accepted
by Sarah Kim, CPA on 16 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0174Role AppropriatenessPASS91%✓ Accepted
by Sarah Kim, CPA on 26 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0175Request DocumentationPASS89%✓ Accepted
by Sarah Kim, CPA on 11 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0175Manager ApprovalPASS92%✓ Accepted
by Sarah Kim, CPA on 21 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0175Timely ProvisioningPASS95%✓ Accepted
by Sarah Kim, CPA on 24 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0175Role AppropriatenessPASS98%✓ Accepted
by Sarah Kim, CPA on 13 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0176Request DocumentationPASS96%✓ Accepted
by Sarah Kim, CPA on 19 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0176Manager ApprovalPASS99%✓ Accepted
by Sarah Kim, CPA on 29 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0176Timely ProvisioningPASS89%✓ Accepted
by Sarah Kim, CPA on 11 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0176Role AppropriatenessPASS92%✓ Accepted
by Sarah Kim, CPA on 21 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0177Request DocumentationPASS90%✓ Accepted
by Sarah Kim, CPA on 27 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0177Manager ApprovalPASS93%✓ Accepted
by Sarah Kim, CPA on 9 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0177Timely ProvisioningPASS96%✓ Accepted
by Sarah Kim, CPA on 19 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0177Role AppropriatenessPASS99%✓ Accepted
by Sarah Kim, CPA on 29 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0178Request DocumentationPASS97%✓ Accepted
by Sarah Kim, CPA on 14 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0178Manager ApprovalPASS87%✓ Accepted
by Sarah Kim, CPA on 17 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0178Timely ProvisioningPASS90%✓ Accepted
by Sarah Kim, CPA on 27 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0178Role AppropriatenessPASS93%✓ Accepted
by Sarah Kim, CPA on 9 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0179Request DocumentationPASS91%✓ Accepted
by Sarah Kim, CPA on 22 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0179Manager ApprovalPASS94%✓ Accepted
by Sarah Kim, CPA on 25 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0179Timely ProvisioningPASS97%✓ Accepted
by Sarah Kim, CPA on 14 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0179Role AppropriatenessPASS87%✓ Accepted
by Sarah Kim, CPA on 17 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0180Request DocumentationPASS98%✓ Accepted
by Sarah Kim, CPA on 23 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0180Manager ApprovalPASS88%✓ Accepted
by Sarah Kim, CPA on 12 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0180Timely ProvisioningPASS91%✓ Accepted
by Sarah Kim, CPA on 22 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0180Role AppropriatenessPASS94%✓ Accepted
by Sarah Kim, CPA on 25 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0181Request DocumentationPASS92%✓ Accepted
by Sarah Kim, CPA on 10 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0181Manager ApprovalPASS95%✓ Accepted
by Sarah Kim, CPA on 20 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0181Timely ProvisioningPASS98%✓ Accepted
by Sarah Kim, CPA on 23 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0181Role AppropriatenessPASS88%✓ Accepted
by Sarah Kim, CPA on 12 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0182Request DocumentationPASS99%✓ Accepted
by Sarah Kim, CPA on 18 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0182Manager ApprovalPASS89%✓ Accepted
by Sarah Kim, CPA on 28 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0182Timely ProvisioningPASS92%✓ Accepted
by Sarah Kim, CPA on 10 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0182Role AppropriatenessPASS95%✓ Accepted
by Sarah Kim, CPA on 20 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0183Request DocumentationPASS93%✓ Accepted
by Sarah Kim, CPA on 26 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0183Manager ApprovalPASS96%✓ Accepted
by Sarah Kim, CPA on 15 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0183Timely ProvisioningPASS99%✓ Accepted
by Sarah Kim, CPA on 18 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0183Role AppropriatenessPASS89%✓ Accepted
by Sarah Kim, CPA on 28 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0184Request DocumentationPASS87%✓ Accepted
by Sarah Kim, CPA on 13 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0184Manager ApprovalPASS90%✓ Accepted
by Sarah Kim, CPA on 16 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0184Timely ProvisioningPASS93%✓ Accepted
by Sarah Kim, CPA on 26 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0184Role AppropriatenessPASS96%✓ Accepted
by Sarah Kim, CPA on 15 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0185Request DocumentationPASS94%✓ Accepted
by Sarah Kim, CPA on 21 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0185Manager ApprovalPASS97%✓ Accepted
by Sarah Kim, CPA on 24 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0185Timely ProvisioningPASS87%✓ Accepted
by Sarah Kim, CPA on 13 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0185Role AppropriatenessPASS90%✓ Accepted
by Sarah Kim, CPA on 16 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0186Request DocumentationPASS88%✓ Accepted
by Sarah Kim, CPA on 29 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0186Manager ApprovalPASS91%✓ Accepted
by Sarah Kim, CPA on 11 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0186Timely ProvisioningPASS94%✓ Accepted
by Sarah Kim, CPA on 21 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0186Role AppropriatenessPASS97%✓ Accepted
by Sarah Kim, CPA on 24 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0187Request DocumentationPASS95%✓ Accepted
by Sarah Kim, CPA on 9 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0187Manager ApprovalPASS98%✓ Accepted
by Sarah Kim, CPA on 19 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0187Timely ProvisioningPASS88%✓ Accepted
by Sarah Kim, CPA on 29 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0187Role AppropriatenessPASS91%✓ Accepted
by Sarah Kim, CPA on 11 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0188Request DocumentationPASS89%✓ Accepted
by Sarah Kim, CPA on 17 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0188Manager ApprovalPASS92%✓ Accepted
by Sarah Kim, CPA on 27 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0188Timely ProvisioningPASS95%✓ Accepted
by Sarah Kim, CPA on 9 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0188Role AppropriatenessPASS82%↻ Overridden
by Sarah Kim, CPA on 19 Sep 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
OKTA-PROV-2026-0189Request DocumentationPASS96%✓ Accepted
by Sarah Kim, CPA on 25 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0189Manager ApprovalPASS99%✓ Accepted
by Sarah Kim, CPA on 14 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0189Timely ProvisioningPASS82%↻ Overridden
by Sarah Kim, CPA on 17 Sep 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
OKTA-PROV-2026-0189Role AppropriatenessPASS92%✓ Accepted
by Sarah Kim, CPA on 27 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0190Request DocumentationPASS90%✓ Accepted
by Sarah Kim, CPA on 12 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0190Manager ApprovalPASS82%↻ Overridden
by Sarah Kim, CPA on 22 Sep 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
OKTA-PROV-2026-0190Timely ProvisioningPASS96%✓ Accepted
by Sarah Kim, CPA on 25 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0190Role AppropriatenessPASS99%✓ Accepted
by Sarah Kim, CPA on 14 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0191Request DocumentationPASS82%↻ Overridden
by Sarah Kim, CPA on 20 Sep 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
OKTA-PROV-2026-0191Manager ApprovalPASS87%✓ Accepted
by Sarah Kim, CPA on 23 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0191Timely ProvisioningPASS90%✓ Accepted
by Sarah Kim, CPA on 12 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0191Role AppropriatenessPASS93%✓ Accepted
by Sarah Kim, CPA on 22 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0192Request DocumentationPASS91%✓ Accepted
by Sarah Kim, CPA on 28 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0192Manager ApprovalPASS94%✓ Accepted
by Sarah Kim, CPA on 10 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0192Timely ProvisioningPASS97%✓ Accepted
by Sarah Kim, CPA on 20 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0192Role AppropriatenessPASS87%✓ Accepted
by Sarah Kim, CPA on 23 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0193Request DocumentationPASS98%✓ Accepted
by Sarah Kim, CPA on 15 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0193Manager ApprovalPASS88%✓ Accepted
by Sarah Kim, CPA on 18 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0193Timely ProvisioningPASS91%✓ Accepted
by Sarah Kim, CPA on 28 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0193Role AppropriatenessPASS94%✓ Accepted
by Sarah Kim, CPA on 10 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0194Request DocumentationPASS92%✓ Accepted
by Sarah Kim, CPA on 16 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0194Manager ApprovalPASS95%✓ Accepted
by Sarah Kim, CPA on 26 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0194Timely ProvisioningPASS98%✓ Accepted
by Sarah Kim, CPA on 15 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0194Role AppropriatenessPASS88%✓ Accepted
by Sarah Kim, CPA on 18 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0195Request DocumentationPASS99%✓ Accepted
by Sarah Kim, CPA on 24 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0195Manager ApprovalPASS89%✓ Accepted
by Sarah Kim, CPA on 13 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0195Timely ProvisioningPASS92%✓ Accepted
by Sarah Kim, CPA on 16 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0195Role AppropriatenessPASS95%✓ Accepted
by Sarah Kim, CPA on 26 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0196Request DocumentationPASS93%✓ Accepted
by Sarah Kim, CPA on 11 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0196Manager ApprovalPASS96%✓ Accepted
by Sarah Kim, CPA on 21 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0196Timely ProvisioningPASS99%✓ Accepted
by Sarah Kim, CPA on 24 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0196Role AppropriatenessPASS89%✓ Accepted
by Sarah Kim, CPA on 13 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0197Request DocumentationPASS87%✓ Accepted
by Sarah Kim, CPA on 19 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0197Manager ApprovalPASS90%✓ Accepted
by Sarah Kim, CPA on 29 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0197Timely ProvisioningPASS93%✓ Accepted
by Sarah Kim, CPA on 11 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0197Role AppropriatenessPASS96%✓ Accepted
by Sarah Kim, CPA on 21 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0198Request DocumentationPASS94%✓ Accepted
by Sarah Kim, CPA on 27 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0198Manager ApprovalPASS97%✓ Accepted
by Sarah Kim, CPA on 9 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0198Timely ProvisioningPASS87%✓ Accepted
by Sarah Kim, CPA on 19 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0198Role AppropriatenessPASS90%✓ Accepted
by Sarah Kim, CPA on 29 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0199Request DocumentationPASS88%✓ Accepted
by Sarah Kim, CPA on 14 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0199Manager ApprovalPASS91%✓ Accepted
by Sarah Kim, CPA on 17 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0199Timely ProvisioningPASS94%✓ Accepted
by Sarah Kim, CPA on 27 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0199Role AppropriatenessPASS97%✓ Accepted
by Sarah Kim, CPA on 9 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0200Request DocumentationPASS95%✓ Accepted
by Sarah Kim, CPA on 22 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0200Manager ApprovalPASS98%✓ Accepted
by Sarah Kim, CPA on 25 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0200Timely ProvisioningPASS88%✓ Accepted
by Sarah Kim, CPA on 14 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0200Role AppropriatenessPASS91%✓ Accepted
by Sarah Kim, CPA on 17 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0201Request DocumentationPASS89%✓ Accepted
by Sarah Kim, CPA on 23 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0201Manager ApprovalPASS92%✓ Accepted
by Sarah Kim, CPA on 12 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0201Timely ProvisioningPASS95%✓ Accepted
by Sarah Kim, CPA on 22 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0201Role AppropriatenessPASS98%✓ Accepted
by Sarah Kim, CPA on 25 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0202Request DocumentationPASS96%✓ Accepted
by Sarah Kim, CPA on 10 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0202Manager ApprovalPASS99%✓ Accepted
by Sarah Kim, CPA on 20 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0202Timely ProvisioningPASS89%✓ Accepted
by Sarah Kim, CPA on 23 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0202Role AppropriatenessPASS92%✓ Accepted
by Sarah Kim, CPA on 12 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0203Request DocumentationPASS90%✓ Accepted
by Sarah Kim, CPA on 18 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0203Manager ApprovalPASS93%✓ Accepted
by Sarah Kim, CPA on 28 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0203Timely ProvisioningPASS96%✓ Accepted
by Sarah Kim, CPA on 10 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0203Role AppropriatenessPASS99%✓ Accepted
by Sarah Kim, CPA on 20 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0204Request DocumentationPASS97%✓ Accepted
by Sarah Kim, CPA on 26 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0204Manager ApprovalPASS87%✓ Accepted
by Sarah Kim, CPA on 15 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0204Timely ProvisioningPASS90%✓ Accepted
by Sarah Kim, CPA on 18 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0204Role AppropriatenessPASS93%✓ Accepted
by Sarah Kim, CPA on 28 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0205Request DocumentationPASS91%✓ Accepted
by Sarah Kim, CPA on 13 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0205Manager ApprovalPASS94%✓ Accepted
by Sarah Kim, CPA on 16 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0205Timely ProvisioningPASS97%✓ Accepted
by Sarah Kim, CPA on 26 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0205Role AppropriatenessPASS87%✓ Accepted
by Sarah Kim, CPA on 15 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0206Request DocumentationPASS98%✓ Accepted
by Sarah Kim, CPA on 21 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0206Manager ApprovalPASS88%✓ Accepted
by Sarah Kim, CPA on 24 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0206Timely ProvisioningPASS91%✓ Accepted
by Sarah Kim, CPA on 13 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0206Role AppropriatenessPASS94%✓ Accepted
by Sarah Kim, CPA on 16 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0207Request DocumentationPASS92%✓ Accepted
by Sarah Kim, CPA on 29 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0207Manager ApprovalPASS95%✓ Accepted
by Sarah Kim, CPA on 11 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0207Timely ProvisioningPASS98%✓ Accepted
by Sarah Kim, CPA on 21 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0207Role AppropriatenessPASS88%✓ Accepted
by Sarah Kim, CPA on 24 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0208Request DocumentationPASS99%✓ Accepted
by Sarah Kim, CPA on 9 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0208Manager ApprovalPASS89%✓ Accepted
by Sarah Kim, CPA on 19 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0208Timely ProvisioningPASS92%✓ Accepted
by Sarah Kim, CPA on 29 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0208Role AppropriatenessPASS95%✓ Accepted
by Sarah Kim, CPA on 11 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0209Request DocumentationPASS93%✓ Accepted
by Sarah Kim, CPA on 17 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0209Manager ApprovalPASS96%✓ Accepted
by Sarah Kim, CPA on 27 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0209Timely ProvisioningPASS99%✓ Accepted
by Sarah Kim, CPA on 9 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0209Role AppropriatenessPASS89%✓ Accepted
by Sarah Kim, CPA on 19 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0210Request DocumentationPASS87%✓ Accepted
by Sarah Kim, CPA on 25 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0210Manager ApprovalPASS90%✓ Accepted
by Sarah Kim, CPA on 14 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0210Timely ProvisioningPASS93%✓ Accepted
by Sarah Kim, CPA on 17 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0210Role AppropriatenessPASS96%✓ Accepted
by Sarah Kim, CPA on 27 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0211Request DocumentationPASS94%✓ Accepted
by Sarah Kim, CPA on 12 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0211Manager ApprovalPASS97%✓ Accepted
by Sarah Kim, CPA on 22 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0211Timely ProvisioningPASS87%✓ Accepted
by Sarah Kim, CPA on 25 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0211Role AppropriatenessPASS90%✓ Accepted
by Sarah Kim, CPA on 14 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0212Request DocumentationPASS88%✓ Accepted
by Sarah Kim, CPA on 20 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0212Manager ApprovalPASS91%✓ Accepted
by Sarah Kim, CPA on 23 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0212Timely ProvisioningPASS94%✓ Accepted
by Sarah Kim, CPA on 12 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0212Role AppropriatenessPASS97%✓ Accepted
by Sarah Kim, CPA on 22 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0213Request DocumentationPASS95%✓ Accepted
by Sarah Kim, CPA on 28 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0213Manager ApprovalPASS98%✓ Accepted
by Sarah Kim, CPA on 10 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0213Timely ProvisioningPASS88%✓ Accepted
by Sarah Kim, CPA on 20 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0213Role AppropriatenessPASS91%✓ Accepted
by Sarah Kim, CPA on 23 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0214Request DocumentationPASS89%✓ Accepted
by Sarah Kim, CPA on 15 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0214Manager ApprovalPASS92%✓ Accepted
by Sarah Kim, CPA on 18 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0214Timely ProvisioningPASS95%✓ Accepted
by Sarah Kim, CPA on 28 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0214Role AppropriatenessPASS98%✓ Accepted
by Sarah Kim, CPA on 10 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0215Request DocumentationPASS96%✓ Accepted
by Sarah Kim, CPA on 16 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0215Manager ApprovalPASS99%✓ Accepted
by Sarah Kim, CPA on 26 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0215Timely ProvisioningPASS89%✓ Accepted
by Sarah Kim, CPA on 15 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0215Role AppropriatenessPASS92%✓ Accepted
by Sarah Kim, CPA on 18 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0216Request DocumentationPASS90%✓ Accepted
by Sarah Kim, CPA on 24 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0216Manager ApprovalPASS93%✓ Accepted
by Sarah Kim, CPA on 13 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0216Timely ProvisioningPASS96%✓ Accepted
by Sarah Kim, CPA on 16 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0216Role AppropriatenessPASS99%✓ Accepted
by Sarah Kim, CPA on 26 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0217Request DocumentationPASS97%✓ Accepted
by Sarah Kim, CPA on 11 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0217Manager ApprovalPASS87%✓ Accepted
by Sarah Kim, CPA on 21 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0217Timely ProvisioningPASS90%✓ Accepted
by Sarah Kim, CPA on 24 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0217Role AppropriatenessPASS93%✓ Accepted
by Sarah Kim, CPA on 13 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0218Request DocumentationPASS91%✓ Accepted
by Sarah Kim, CPA on 19 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0218Manager ApprovalPASS94%✓ Accepted
by Sarah Kim, CPA on 29 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0218Timely ProvisioningPASS97%✓ Accepted
by Sarah Kim, CPA on 11 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0218Role AppropriatenessPASS87%✓ Accepted
by Sarah Kim, CPA on 21 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0219Request DocumentationPASS98%✓ Accepted
by Sarah Kim, CPA on 27 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0219Manager ApprovalPASS88%✓ Accepted
by Sarah Kim, CPA on 9 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0219Timely ProvisioningPASS91%✓ Accepted
by Sarah Kim, CPA on 19 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0219Role AppropriatenessPASS94%✓ Accepted
by Sarah Kim, CPA on 29 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0220Request DocumentationPASS92%✓ Accepted
by Sarah Kim, CPA on 14 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0220Manager ApprovalPASS95%✓ Accepted
by Sarah Kim, CPA on 17 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0220Timely ProvisioningPASS98%✓ Accepted
by Sarah Kim, CPA on 27 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0220Role AppropriatenessPASS88%✓ Accepted
by Sarah Kim, CPA on 9 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0221Request DocumentationPASS99%✓ Accepted
by Sarah Kim, CPA on 22 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0221Manager ApprovalPASS89%✓ Accepted
by Sarah Kim, CPA on 25 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0221Timely ProvisioningPASS92%✓ Accepted
by Sarah Kim, CPA on 14 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0221Role AppropriatenessPASS95%✓ Accepted
by Sarah Kim, CPA on 17 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0222Request DocumentationPASS93%✓ Accepted
by Sarah Kim, CPA on 23 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0222Manager ApprovalPASS96%✓ Accepted
by Sarah Kim, CPA on 12 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0222Timely ProvisioningPASS99%✓ Accepted
by Sarah Kim, CPA on 22 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0222Role AppropriatenessPASS89%✓ Accepted
by Sarah Kim, CPA on 25 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0223Request DocumentationPASS87%✓ Accepted
by Sarah Kim, CPA on 10 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0223Manager ApprovalPASS90%✓ Accepted
by Sarah Kim, CPA on 20 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0223Timely ProvisioningPASS93%✓ Accepted
by Sarah Kim, CPA on 23 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0223Role AppropriatenessPASS81%↻ Overridden
by Sarah Kim, CPA on 12 Sep 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
OKTA-PROV-2026-0224Request DocumentationPASS94%✓ Accepted
by Sarah Kim, CPA on 18 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0224Manager ApprovalPASS97%✓ Accepted
by Sarah Kim, CPA on 28 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0224Timely ProvisioningPASS81%↻ Overridden
by Sarah Kim, CPA on 10 Sep 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
OKTA-PROV-2026-0224Role AppropriatenessPASS90%✓ Accepted
by Sarah Kim, CPA on 20 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0225Request DocumentationPASS88%✓ Accepted
by Sarah Kim, CPA on 26 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0225Manager ApprovalPASS81%↻ Overridden
by Sarah Kim, CPA on 15 Sep 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
OKTA-PROV-2026-0225Timely ProvisioningPASS94%✓ Accepted
by Sarah Kim, CPA on 18 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0225Role AppropriatenessPASS97%✓ Accepted
by Sarah Kim, CPA on 28 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0226Request DocumentationPASS81%↻ Overridden
by Sarah Kim, CPA on 13 Sep 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
OKTA-PROV-2026-0226Manager ApprovalPASS98%✓ Accepted
by Sarah Kim, CPA on 16 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0226Timely ProvisioningPASS88%✓ Accepted
by Sarah Kim, CPA on 26 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0226Role AppropriatenessPASS91%✓ Accepted
by Sarah Kim, CPA on 15 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0227Request DocumentationPASS89%✓ Accepted
by Sarah Kim, CPA on 21 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0227Manager ApprovalPASS92%✓ Accepted
by Sarah Kim, CPA on 24 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0227Timely ProvisioningPASS95%✓ Accepted
by Sarah Kim, CPA on 13 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0227Role AppropriatenessPASS98%✓ Accepted
by Sarah Kim, CPA on 16 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0228Request DocumentationPASS96%✓ Accepted
by Sarah Kim, CPA on 29 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0228Manager ApprovalPASS99%✓ Accepted
by Sarah Kim, CPA on 11 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0228Timely ProvisioningPASS89%✓ Accepted
by Sarah Kim, CPA on 21 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0228Role AppropriatenessPASS92%✓ Accepted
by Sarah Kim, CPA on 24 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0229Request DocumentationPASS90%✓ Accepted
by Sarah Kim, CPA on 9 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0229Manager ApprovalPASS93%✓ Accepted
by Sarah Kim, CPA on 19 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0229Timely ProvisioningPASS96%✓ Accepted
by Sarah Kim, CPA on 29 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0229Role AppropriatenessPASS99%✓ Accepted
by Sarah Kim, CPA on 11 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0230Request DocumentationPASS97%✓ Accepted
by Sarah Kim, CPA on 17 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0230Manager ApprovalPASS87%✓ Accepted
by Sarah Kim, CPA on 27 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0230Timely ProvisioningPASS90%✓ Accepted
by Sarah Kim, CPA on 9 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0230Role AppropriatenessPASS93%✓ Accepted
by Sarah Kim, CPA on 19 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0231Request DocumentationPASS91%✓ Accepted
by Sarah Kim, CPA on 25 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0231Manager ApprovalPASS94%✓ Accepted
by Sarah Kim, CPA on 14 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0231Timely ProvisioningPASS97%✓ Accepted
by Sarah Kim, CPA on 17 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0231Role AppropriatenessPASS87%✓ Accepted
by Sarah Kim, CPA on 27 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0232Request DocumentationPASS98%✓ Accepted
by Sarah Kim, CPA on 12 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0232Manager ApprovalPASS88%✓ Accepted
by Sarah Kim, CPA on 22 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0232Timely ProvisioningPASS91%✓ Accepted
by Sarah Kim, CPA on 25 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0232Role AppropriatenessPASS94%✓ Accepted
by Sarah Kim, CPA on 14 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0233Request DocumentationPASS92%✓ Accepted
by Sarah Kim, CPA on 20 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0233Manager ApprovalPASS95%✓ Accepted
by Sarah Kim, CPA on 23 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0233Timely ProvisioningPASS98%✓ Accepted
by Sarah Kim, CPA on 12 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0233Role AppropriatenessPASS88%✓ Accepted
by Sarah Kim, CPA on 22 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0234Request DocumentationPASS99%✓ Accepted
by Sarah Kim, CPA on 28 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0234Manager ApprovalPASS89%✓ Accepted
by Sarah Kim, CPA on 10 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0234Timely ProvisioningPASS92%✓ Accepted
by Sarah Kim, CPA on 20 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0234Role AppropriatenessPASS95%✓ Accepted
by Sarah Kim, CPA on 23 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0235Request DocumentationPASS93%✓ Accepted
by Sarah Kim, CPA on 15 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0235Manager ApprovalPASS96%✓ Accepted
by Sarah Kim, CPA on 18 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0235Timely ProvisioningPASS99%✓ Accepted
by Sarah Kim, CPA on 28 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0235Role AppropriatenessPASS89%✓ Accepted
by Sarah Kim, CPA on 10 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0236Request DocumentationPASS87%✓ Accepted
by Sarah Kim, CPA on 16 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0236Manager ApprovalPASS90%✓ Accepted
by Sarah Kim, CPA on 26 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0236Timely ProvisioningPASS93%✓ Accepted
by Sarah Kim, CPA on 15 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0236Role AppropriatenessPASS96%✓ Accepted
by Sarah Kim, CPA on 18 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0237Request DocumentationPASS94%✓ Accepted
by Sarah Kim, CPA on 24 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0237Manager ApprovalPASS97%✓ Accepted
by Sarah Kim, CPA on 13 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0237Timely ProvisioningPASS87%✓ Accepted
by Sarah Kim, CPA on 16 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0237Role AppropriatenessPASS90%✓ Accepted
by Sarah Kim, CPA on 26 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0238Request DocumentationPASS88%✓ Accepted
by Sarah Kim, CPA on 11 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0238Manager ApprovalPASS91%✓ Accepted
by Sarah Kim, CPA on 21 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0238Timely ProvisioningPASS94%✓ Accepted
by Sarah Kim, CPA on 24 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0238Role AppropriatenessPASS97%✓ Accepted
by Sarah Kim, CPA on 13 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0239Request DocumentationPASS95%✓ Accepted
by Sarah Kim, CPA on 19 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0239Manager ApprovalPASS98%✓ Accepted
by Sarah Kim, CPA on 29 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0239Timely ProvisioningPASS88%✓ Accepted
by Sarah Kim, CPA on 11 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0239Role AppropriatenessPASS91%✓ Accepted
by Sarah Kim, CPA on 21 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0240Request DocumentationPASS89%✓ Accepted
by Sarah Kim, CPA on 27 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0240Manager ApprovalPASS92%✓ Accepted
by Sarah Kim, CPA on 9 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0240Timely ProvisioningPASS95%✓ Accepted
by Sarah Kim, CPA on 19 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0240Role AppropriatenessPASS98%✓ Accepted
by Sarah Kim, CPA on 29 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0241Request DocumentationPASS96%✓ Accepted
by Sarah Kim, CPA on 14 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0241Manager ApprovalPASS99%✓ Accepted
by Sarah Kim, CPA on 17 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0241Timely ProvisioningPASS89%✓ Accepted
by Sarah Kim, CPA on 27 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0241Role AppropriatenessPASS92%✓ Accepted
by Sarah Kim, CPA on 9 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0242Request DocumentationPASS90%✓ Accepted
by Sarah Kim, CPA on 22 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0242Manager ApprovalPASS93%✓ Accepted
by Sarah Kim, CPA on 25 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0242Timely ProvisioningPASS96%✓ Accepted
by Sarah Kim, CPA on 14 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0242Role AppropriatenessPASS99%✓ Accepted
by Sarah Kim, CPA on 17 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0243Request DocumentationPASS97%✓ Accepted
by Sarah Kim, CPA on 23 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-PROV-2026-0243Manager ApprovalPASS87%✓ Accepted
by Sarah Kim, CPA on 12 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0243Timely ProvisioningPASS90%✓ Accepted
by Sarah Kim, CPA on 22 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0243Role AppropriatenessPASS93%✓ Accepted
by Sarah Kim, CPA on 25 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0244Request DocumentationPASS91%✓ Accepted
by Sarah Kim, CPA on 10 Sep 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-PROV-2026-0244Manager ApprovalPASS94%✓ Accepted
by Sarah Kim, CPA on 20 Sep 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-PROV-2026-0244Timely ProvisioningPASS97%✓ Accepted
by Sarah Kim, CPA on 23 Sep 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-PROV-2026-0244Role AppropriatenessPASS87%✓ Accepted
by Sarah Kim, CPA on 12 Sep 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001

Total: 400 AI test results

Note: All AI test results require auditor review before conclusions can be locked (Evidence-First methodology).
EXCEPTIONS (2):
Joiner-SLA miss — manager on PTO, no backup approver configured
Low Remediated

Sample OKTA-PROV-2026-0149 (Okta provisioning ticket TKT-10312): the requesting manager's approval was recorded in Okta on 2026-02-28 — one business day past the hire-date SLA. Access was subsequently provisioned within the 3-business-day window measured from approval, but the hire-date SLA measured from start-of-employment was breached for this hire.

Joiner-SLA miss — same root cause, occurred before remediation effective date
Low Remediated

Sample OKTA-PROV-2026-0163 (Okta provisioning ticket TKT-10581): the requesting manager's approval was recorded in Okta on 2026-03-08 — two business days past the hire-date SLA. Identified same backup-approver gap as TKT-10312. Re-tested on 2026-03-08 sample-selection date during the remediation-design window.

A6 User Access Reviews (UAR) Locked
Effective
WP-Ref: WP-APXFG-2026-ITGC-A6 | System: Okta | Category: Access Management | Population: 88 | Samples: 45 | Signed off by: Sarah Kim, CPA on 18 Mar 2027

Verifies that periodic user access reviews are performed for all users.

CONCLUSION NARRATIVE:

We tested quarterly user access reviews (UARs) covering the period 1 January 2026 through 31 December 2026 for Apex Financial Group's in-scope financial-reporting systems. The population comprises 88 quarterly access-certification sessions recorded in Okta's UAR module across Q1-Q4 FY2026; we selected 45 sample items using a random-selection method consistent with the firm's sample-size methodology guide §SAM-04 (15% tolerable deviation rate, 3% expected deviation rate, 10% risk of overreliance for MEDIUM-risk access controls). Sample selection drew proportionally across all four quarters. Testing results: 45 of 45 sampled UARs met all three control attributes — coverage complete (every in-scope account included in the certification population), timely completion of the review within the quarterly cadence by the designated control owner, and action on exceptions evidenced (any flagged inappropriate access removed within the 5-business-day remediation SLA per the Access Certification Policy v2.7). The observed deviation rate is 0 of 45 (0.0%), which is below the 15% tolerable deviation rate established for this control's risk profile; the sample size follows the firm's §SAM-04 tolerable-deviation-rate matrix for this risk profile. No exceptions were identified during testing. AI-assisted testing produced pass results for all 45 sampled UARs; warn-band findings (AI confidence below the 85% threshold) were auditor-reviewed with documented override rationale per the AI Provenance log (see §7 — AI Provenance). No deficiencies were identified that require classification under the AICPA AU-C 940 deficiency-evaluation framework. We conclude the control operated effectively during the period 1 January 2026 – 31 December 2026 in all material respects relevant to the entity's IT General Controls over financial reporting.

ATTRIBUTE-LEVEL TESTING RESULTS:
Sample Coverage Timely Completion Action on Exceptions Evidence
OKTA-UAR-Q1-2026-020 3 file(s)
OKTA-UAR-Q2-2026-021 3 file(s)
OKTA-UAR-Q3-2026-022 3 file(s)
OKTA-UAR-Q4-2026-023 3 file(s)
OKTA-UAR-Q1-2026-024 3 file(s)
OKTA-UAR-Q2-2026-025 3 file(s)
OKTA-UAR-Q3-2026-026 3 file(s)
OKTA-UAR-Q4-2026-027 3 file(s)
OKTA-UAR-Q1-2026-028 3 file(s)
OKTA-UAR-Q2-2026-029 3 file(s)
OKTA-UAR-Q3-2026-030 3 file(s)
OKTA-UAR-Q4-2026-031 3 file(s)
OKTA-UAR-Q1-2026-032 3 file(s)
OKTA-UAR-Q2-2026-033 3 file(s)
OKTA-UAR-Q3-2026-034 3 file(s)
OKTA-UAR-Q4-2026-035 3 file(s)
OKTA-UAR-Q1-2026-036 3 file(s)
OKTA-UAR-Q2-2026-037 3 file(s)
OKTA-UAR-Q3-2026-038 3 file(s)
OKTA-UAR-Q4-2026-039 3 file(s)
OKTA-UAR-Q1-2026-040 3 file(s)
OKTA-UAR-Q2-2026-041 3 file(s)
OKTA-UAR-Q3-2026-042 3 file(s)
OKTA-UAR-Q4-2026-043 3 file(s)
OKTA-UAR-Q1-2026-044 3 file(s)
OKTA-UAR-Q2-2026-045 3 file(s)
OKTA-UAR-Q3-2026-046 3 file(s)
OKTA-UAR-Q4-2026-047 3 file(s)
OKTA-UAR-Q1-2026-048 3 file(s)
OKTA-UAR-Q2-2026-049 3 file(s)
OKTA-UAR-Q3-2026-050 3 file(s)
OKTA-UAR-Q4-2026-051 3 file(s)
OKTA-UAR-Q1-2026-052 3 file(s)
OKTA-UAR-Q2-2026-053 3 file(s)
OKTA-UAR-Q3-2026-054 3 file(s)
OKTA-UAR-Q4-2026-055 3 file(s)
OKTA-UAR-Q1-2026-056 3 file(s)
OKTA-UAR-Q2-2026-057 3 file(s)
OKTA-UAR-Q3-2026-058 3 file(s)
OKTA-UAR-Q4-2026-059 3 file(s)
OKTA-UAR-Q1-2026-060 3 file(s)
OKTA-UAR-Q2-2026-061 3 file(s)
OKTA-UAR-Q3-2026-062 3 file(s)
OKTA-UAR-Q4-2026-063 3 file(s)
OKTA-UAR-Q1-2026-064 3 file(s)
Legend: ✓ Pass | ✗ Fail | ◐ Inconclusive | ⚠ Warn | ◌ Pending | – Not Tested
AI TESTING PROVENANCE (Evidence-First):
Total AI Results: 135
Samples Tested: 45
Accepted: 131
Overridden: 4
Avg Confidence: 92.6%
<70%: 0
≥90%: 99
Sample Attribute AI Result Confidence Auditor Rationale Model
OKTA-UAR-Q1-2026-020CoveragePASS87%✓ Accepted
by Sarah Kim, CPA on 4 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q1-2026-020Timely CompletionPASS90%✓ Accepted
by Sarah Kim, CPA on 16 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q1-2026-020Action on ExceptionsPASS93%✓ Accepted
by Sarah Kim, CPA on 10 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q2-2026-021CoveragePASS94%✓ Accepted
by Sarah Kim, CPA on 14 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q2-2026-021Timely CompletionPASS97%✓ Accepted
by Sarah Kim, CPA on 8 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q2-2026-021Action on ExceptionsPASS87%✓ Accepted
by Sarah Kim, CPA on 13 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q3-2026-022CoveragePASS88%✓ Accepted
by Sarah Kim, CPA on 6 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q3-2026-022Timely CompletionPASS91%✓ Accepted
by Sarah Kim, CPA on 18 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q3-2026-022Action on ExceptionsPASS94%✓ Accepted
by Sarah Kim, CPA on 5 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q4-2026-023CoveragePASS95%✓ Accepted
by Sarah Kim, CPA on 16 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q4-2026-023Timely CompletionPASS98%✓ Accepted
by Sarah Kim, CPA on 10 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q4-2026-023Action on ExceptionsPASS88%✓ Accepted
by Sarah Kim, CPA on 15 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q1-2026-024CoveragePASS89%✓ Accepted
by Sarah Kim, CPA on 8 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q1-2026-024Timely CompletionPASS92%✓ Accepted
by Sarah Kim, CPA on 13 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q1-2026-024Action on ExceptionsPASS95%✓ Accepted
by Sarah Kim, CPA on 7 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q2-2026-025CoveragePASS96%✓ Accepted
by Sarah Kim, CPA on 18 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q2-2026-025Timely CompletionPASS99%✓ Accepted
by Sarah Kim, CPA on 5 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q2-2026-025Action on ExceptionsPASS89%✓ Accepted
by Sarah Kim, CPA on 17 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q3-2026-026CoveragePASS90%✓ Accepted
by Sarah Kim, CPA on 10 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q3-2026-026Timely CompletionPASS93%✓ Accepted
by Sarah Kim, CPA on 15 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q3-2026-026Action on ExceptionsPASS96%✓ Accepted
by Sarah Kim, CPA on 9 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q4-2026-027CoveragePASS97%✓ Accepted
by Sarah Kim, CPA on 13 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q4-2026-027Timely CompletionPASS87%✓ Accepted
by Sarah Kim, CPA on 7 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q4-2026-027Action on ExceptionsPASS90%✓ Accepted
by Sarah Kim, CPA on 19 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q1-2026-028CoveragePASS91%✓ Accepted
by Sarah Kim, CPA on 5 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q1-2026-028Timely CompletionPASS94%✓ Accepted
by Sarah Kim, CPA on 17 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q1-2026-028Action on ExceptionsPASS97%✓ Accepted
by Sarah Kim, CPA on 4 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q2-2026-029CoveragePASS98%✓ Accepted
by Sarah Kim, CPA on 15 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q2-2026-029Timely CompletionPASS88%✓ Accepted
by Sarah Kim, CPA on 9 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q2-2026-029Action on ExceptionsPASS83%↻ Overridden
by Sarah Kim, CPA on 14 Oct 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
OKTA-UAR-Q3-2026-030CoveragePASS92%✓ Accepted
by Sarah Kim, CPA on 7 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q3-2026-030Timely CompletionPASS83%↻ Overridden
by Sarah Kim, CPA on 19 Oct 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
OKTA-UAR-Q3-2026-030Action on ExceptionsPASS98%✓ Accepted
by Sarah Kim, CPA on 6 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q4-2026-031CoveragePASS83%↻ Overridden
by Sarah Kim, CPA on 17 Oct 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
OKTA-UAR-Q4-2026-031Timely CompletionPASS89%✓ Accepted
by Sarah Kim, CPA on 4 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q4-2026-031Action on ExceptionsPASS92%✓ Accepted
by Sarah Kim, CPA on 16 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q1-2026-032CoveragePASS93%✓ Accepted
by Sarah Kim, CPA on 9 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q1-2026-032Timely CompletionPASS96%✓ Accepted
by Sarah Kim, CPA on 14 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q1-2026-032Action on ExceptionsPASS99%✓ Accepted
by Sarah Kim, CPA on 8 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q2-2026-033CoveragePASS87%✓ Accepted
by Sarah Kim, CPA on 19 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q2-2026-033Timely CompletionPASS90%✓ Accepted
by Sarah Kim, CPA on 6 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q2-2026-033Action on ExceptionsPASS93%✓ Accepted
by Sarah Kim, CPA on 18 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q3-2026-034CoveragePASS94%✓ Accepted
by Sarah Kim, CPA on 4 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q3-2026-034Timely CompletionPASS97%✓ Accepted
by Sarah Kim, CPA on 16 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q3-2026-034Action on ExceptionsPASS87%✓ Accepted
by Sarah Kim, CPA on 10 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q4-2026-035CoveragePASS88%✓ Accepted
by Sarah Kim, CPA on 14 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q4-2026-035Timely CompletionPASS91%✓ Accepted
by Sarah Kim, CPA on 8 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q4-2026-035Action on ExceptionsPASS94%✓ Accepted
by Sarah Kim, CPA on 13 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q1-2026-036CoveragePASS95%✓ Accepted
by Sarah Kim, CPA on 6 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q1-2026-036Timely CompletionPASS98%✓ Accepted
by Sarah Kim, CPA on 18 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q1-2026-036Action on ExceptionsPASS88%✓ Accepted
by Sarah Kim, CPA on 5 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q2-2026-037CoveragePASS89%✓ Accepted
by Sarah Kim, CPA on 16 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q2-2026-037Timely CompletionPASS92%✓ Accepted
by Sarah Kim, CPA on 10 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q2-2026-037Action on ExceptionsPASS95%✓ Accepted
by Sarah Kim, CPA on 15 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q3-2026-038CoveragePASS96%✓ Accepted
by Sarah Kim, CPA on 8 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q3-2026-038Timely CompletionPASS99%✓ Accepted
by Sarah Kim, CPA on 13 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q3-2026-038Action on ExceptionsPASS89%✓ Accepted
by Sarah Kim, CPA on 7 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q4-2026-039CoveragePASS90%✓ Accepted
by Sarah Kim, CPA on 18 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q4-2026-039Timely CompletionPASS93%✓ Accepted
by Sarah Kim, CPA on 5 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q4-2026-039Action on ExceptionsPASS96%✓ Accepted
by Sarah Kim, CPA on 17 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q1-2026-040CoveragePASS97%✓ Accepted
by Sarah Kim, CPA on 10 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q1-2026-040Timely CompletionPASS87%✓ Accepted
by Sarah Kim, CPA on 15 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q1-2026-040Action on ExceptionsPASS90%✓ Accepted
by Sarah Kim, CPA on 9 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q2-2026-041CoveragePASS91%✓ Accepted
by Sarah Kim, CPA on 13 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q2-2026-041Timely CompletionPASS94%✓ Accepted
by Sarah Kim, CPA on 7 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q2-2026-041Action on ExceptionsPASS97%✓ Accepted
by Sarah Kim, CPA on 19 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q3-2026-042CoveragePASS98%✓ Accepted
by Sarah Kim, CPA on 5 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q3-2026-042Timely CompletionPASS88%✓ Accepted
by Sarah Kim, CPA on 17 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q3-2026-042Action on ExceptionsPASS91%✓ Accepted
by Sarah Kim, CPA on 4 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q4-2026-043CoveragePASS92%✓ Accepted
by Sarah Kim, CPA on 15 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q4-2026-043Timely CompletionPASS95%✓ Accepted
by Sarah Kim, CPA on 9 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q4-2026-043Action on ExceptionsPASS98%✓ Accepted
by Sarah Kim, CPA on 14 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q1-2026-044CoveragePASS99%✓ Accepted
by Sarah Kim, CPA on 7 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q1-2026-044Timely CompletionPASS89%✓ Accepted
by Sarah Kim, CPA on 19 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q1-2026-044Action on ExceptionsPASS92%✓ Accepted
by Sarah Kim, CPA on 6 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q2-2026-045CoveragePASS93%✓ Accepted
by Sarah Kim, CPA on 17 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q2-2026-045Timely CompletionPASS96%✓ Accepted
by Sarah Kim, CPA on 4 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q2-2026-045Action on ExceptionsPASS99%✓ Accepted
by Sarah Kim, CPA on 16 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q3-2026-046CoveragePASS87%✓ Accepted
by Sarah Kim, CPA on 9 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q3-2026-046Timely CompletionPASS90%✓ Accepted
by Sarah Kim, CPA on 14 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q3-2026-046Action on ExceptionsPASS93%✓ Accepted
by Sarah Kim, CPA on 8 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q4-2026-047CoveragePASS94%✓ Accepted
by Sarah Kim, CPA on 19 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q4-2026-047Timely CompletionPASS97%✓ Accepted
by Sarah Kim, CPA on 6 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q4-2026-047Action on ExceptionsPASS87%✓ Accepted
by Sarah Kim, CPA on 18 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q1-2026-048CoveragePASS88%✓ Accepted
by Sarah Kim, CPA on 4 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q1-2026-048Timely CompletionPASS91%✓ Accepted
by Sarah Kim, CPA on 16 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q1-2026-048Action on ExceptionsPASS94%✓ Accepted
by Sarah Kim, CPA on 10 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q2-2026-049CoveragePASS95%✓ Accepted
by Sarah Kim, CPA on 14 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q2-2026-049Timely CompletionPASS98%✓ Accepted
by Sarah Kim, CPA on 8 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q2-2026-049Action on ExceptionsPASS88%✓ Accepted
by Sarah Kim, CPA on 13 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q3-2026-050CoveragePASS89%✓ Accepted
by Sarah Kim, CPA on 6 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q3-2026-050Timely CompletionPASS92%✓ Accepted
by Sarah Kim, CPA on 18 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q3-2026-050Action on ExceptionsPASS95%✓ Accepted
by Sarah Kim, CPA on 5 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q4-2026-051CoveragePASS96%✓ Accepted
by Sarah Kim, CPA on 16 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q4-2026-051Timely CompletionPASS99%✓ Accepted
by Sarah Kim, CPA on 10 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q4-2026-051Action on ExceptionsPASS89%✓ Accepted
by Sarah Kim, CPA on 15 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q1-2026-052CoveragePASS90%✓ Accepted
by Sarah Kim, CPA on 8 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q1-2026-052Timely CompletionPASS93%✓ Accepted
by Sarah Kim, CPA on 13 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q1-2026-052Action on ExceptionsPASS96%✓ Accepted
by Sarah Kim, CPA on 7 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q2-2026-053CoveragePASS97%✓ Accepted
by Sarah Kim, CPA on 18 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q2-2026-053Timely CompletionPASS87%✓ Accepted
by Sarah Kim, CPA on 5 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q2-2026-053Action on ExceptionsPASS90%✓ Accepted
by Sarah Kim, CPA on 17 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q3-2026-054CoveragePASS91%✓ Accepted
by Sarah Kim, CPA on 10 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q3-2026-054Timely CompletionPASS94%✓ Accepted
by Sarah Kim, CPA on 15 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q3-2026-054Action on ExceptionsPASS97%✓ Accepted
by Sarah Kim, CPA on 9 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q4-2026-055CoveragePASS98%✓ Accepted
by Sarah Kim, CPA on 13 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q4-2026-055Timely CompletionPASS88%✓ Accepted
by Sarah Kim, CPA on 7 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q4-2026-055Action on ExceptionsPASS91%✓ Accepted
by Sarah Kim, CPA on 19 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q1-2026-056CoveragePASS92%✓ Accepted
by Sarah Kim, CPA on 5 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q1-2026-056Timely CompletionPASS95%✓ Accepted
by Sarah Kim, CPA on 17 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q1-2026-056Action on ExceptionsPASS98%✓ Accepted
by Sarah Kim, CPA on 4 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q2-2026-057CoveragePASS99%✓ Accepted
by Sarah Kim, CPA on 15 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q2-2026-057Timely CompletionPASS89%✓ Accepted
by Sarah Kim, CPA on 9 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q2-2026-057Action on ExceptionsPASS92%✓ Accepted
by Sarah Kim, CPA on 14 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q3-2026-058CoveragePASS93%✓ Accepted
by Sarah Kim, CPA on 7 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q3-2026-058Timely CompletionPASS96%✓ Accepted
by Sarah Kim, CPA on 19 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q3-2026-058Action on ExceptionsPASS99%✓ Accepted
by Sarah Kim, CPA on 6 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q4-2026-059CoveragePASS87%✓ Accepted
by Sarah Kim, CPA on 17 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q4-2026-059Timely CompletionPASS90%✓ Accepted
by Sarah Kim, CPA on 4 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q4-2026-059Action on ExceptionsPASS93%✓ Accepted
by Sarah Kim, CPA on 16 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q1-2026-060CoveragePASS94%✓ Accepted
by Sarah Kim, CPA on 9 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q1-2026-060Timely CompletionPASS97%✓ Accepted
by Sarah Kim, CPA on 14 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q1-2026-060Action on ExceptionsPASS87%✓ Accepted
by Sarah Kim, CPA on 8 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q2-2026-061CoveragePASS88%✓ Accepted
by Sarah Kim, CPA on 19 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q2-2026-061Timely CompletionPASS91%✓ Accepted
by Sarah Kim, CPA on 6 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q2-2026-061Action on ExceptionsPASS94%✓ Accepted
by Sarah Kim, CPA on 18 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q3-2026-062CoveragePASS95%✓ Accepted
by Sarah Kim, CPA on 4 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
OKTA-UAR-Q3-2026-062Timely CompletionPASS98%✓ Accepted
by Sarah Kim, CPA on 16 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q3-2026-062Action on ExceptionsPASS88%✓ Accepted
by Sarah Kim, CPA on 10 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q4-2026-063CoveragePASS89%✓ Accepted
by Sarah Kim, CPA on 14 Oct 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
OKTA-UAR-Q4-2026-063Timely CompletionPASS92%✓ Accepted
by Sarah Kim, CPA on 8 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q4-2026-063Action on ExceptionsPASS95%✓ Accepted
by Sarah Kim, CPA on 13 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q1-2026-064CoveragePASS96%✓ Accepted
by Sarah Kim, CPA on 6 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
OKTA-UAR-Q1-2026-064Timely CompletionPASS99%✓ Accepted
by Sarah Kim, CPA on 18 Oct 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
OKTA-UAR-Q1-2026-064Action on ExceptionsPASS82%↻ Overridden
by Sarah Kim, CPA on 5 Oct 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001

Total: 135 AI test results

Note: All AI test results require auditor review before conclusions can be locked (Evidence-First methodology).
A9 Cloud IAM Policy and Identity Review Locked
Effective
WP-Ref: WP-APXFG-2026-ITGC-A9 | System: AWS Production Account | Category: Access Management | Population: 156 | Samples: 58 | Signed off by: Sarah Kim, CPA on 20 Mar 2027

Verifies that cloud IAM policies, roles, and service-account identities follow least-privilege, lack over-permissive wildcards, and have current MFA + rotation hygiene.

CONCLUSION NARRATIVE:

We tested cloud IAM policy reviews covering the period 1 January 2026 through 31 December 2026 for Apex Financial Group's AWS Production Account. The population comprises 156 IAM policy reviews logged across FY2026; we selected 58 sample items using a random-selection method consistent with the firm's sample-size methodology guide §SAM-04 (15% tolerable deviation rate, 2% expected deviation rate, 10% risk of overreliance for MEDIUM-risk access controls). Sample selection drew proportionally across all four quarters and covered IAM policies for the eight in-scope production AWS accounts. Testing results: 58 of 58 sampled reviews met all seven control attributes — IAM policy not over-permissive (least-privilege baseline per the Cloud IAM Policy Review Standard v1.8), identity used recently (no stale principals), MFA enforced on human identities, service-account access keys rotated within cadence, cross-account trust relationships reviewed, privileged-role elevation logged, and IAM Access Analyzer review completed for the period. Verification was documented by the Cloud Infrastructure team with secondary review by Security Engineering; no over-privileged grants were identified. The observed deviation rate is 0 of 58 (0.0%), which is below the 15% tolerable deviation rate established for this control's risk profile. No exceptions were identified during testing. AI-assisted testing produced pass results for all sampled attributes; the few warn-band findings were auditor-reviewed with documented override rationale (see §7 — AI Provenance). No deficiencies were identified that require classification under the AICPA AU-C 940 deficiency-evaluation framework. We conclude the control operated effectively during the period 1 January 2026 – 31 December 2026 in all material respects relevant to the entity's IT General Controls over financial reporting.

ATTRIBUTE-LEVEL TESTING RESULTS:
Sample Policy Not Over-Permissive Identity Used Recently MFA Enforced Service Account Key Rotated Cross-Account Trust Reviewed Privileged Role Elevation Logged Access Analyzer Completed Evidence
AWS-IAM-REV-2026-008 7 file(s)
AWS-IAM-REV-2026-009 7 file(s)
AWS-IAM-REV-2026-010 7 file(s)
AWS-IAM-REV-2026-011 7 file(s)
AWS-IAM-REV-2026-012 7 file(s)
AWS-IAM-REV-2026-013 7 file(s)
AWS-IAM-REV-2026-014 7 file(s)
AWS-IAM-REV-2026-015 7 file(s)
AWS-IAM-REV-2026-016 7 file(s)
AWS-IAM-REV-2026-017 7 file(s)
AWS-IAM-REV-2026-018 7 file(s)
AWS-IAM-REV-2026-019 7 file(s)
AWS-IAM-REV-2026-020 7 file(s)
AWS-IAM-REV-2026-021 7 file(s)
AWS-IAM-REV-2026-022 7 file(s)
AWS-IAM-REV-2026-023 7 file(s)
AWS-IAM-REV-2026-024 7 file(s)
AWS-IAM-REV-2026-025 7 file(s)
AWS-IAM-REV-2026-026 7 file(s)
AWS-IAM-REV-2026-027 7 file(s)
AWS-IAM-REV-2026-028 7 file(s)
AWS-IAM-REV-2026-029 7 file(s)
AWS-IAM-REV-2026-030 7 file(s)
AWS-IAM-REV-2026-031 7 file(s)
AWS-IAM-REV-2026-032 7 file(s)
AWS-IAM-REV-2026-033 7 file(s)
AWS-IAM-REV-2026-034 7 file(s)
AWS-IAM-REV-2026-035 7 file(s)
AWS-IAM-REV-2026-036 7 file(s)
AWS-IAM-REV-2026-037 7 file(s)
AWS-IAM-REV-2026-038 7 file(s)
AWS-IAM-REV-2026-039 7 file(s)
AWS-IAM-REV-2026-040 7 file(s)
AWS-IAM-REV-2026-041 7 file(s)
AWS-IAM-REV-2026-042 7 file(s)
AWS-IAM-REV-2026-043 7 file(s)
AWS-IAM-REV-2026-044 7 file(s)
AWS-IAM-REV-2026-045 7 file(s)
AWS-IAM-REV-2026-046 7 file(s)
AWS-IAM-REV-2026-047 7 file(s)
AWS-IAM-REV-2026-048 7 file(s)
AWS-IAM-REV-2026-049 7 file(s)
AWS-IAM-REV-2026-050 7 file(s)
AWS-IAM-REV-2026-051 7 file(s)
AWS-IAM-REV-2026-052 7 file(s)
AWS-IAM-REV-2026-053 7 file(s)
AWS-IAM-REV-2026-054 7 file(s)
AWS-IAM-REV-2026-055 7 file(s)
AWS-IAM-REV-2026-056 7 file(s)
AWS-IAM-REV-2026-057 7 file(s)
AWS-IAM-REV-2026-058 7 file(s)
AWS-IAM-REV-2026-059 7 file(s)
AWS-IAM-REV-2026-060 7 file(s)
AWS-IAM-REV-2026-061 7 file(s)
AWS-IAM-REV-2026-062 7 file(s)
AWS-IAM-REV-2026-063 7 file(s)
AWS-IAM-REV-2026-064 7 file(s)
AWS-IAM-REV-2026-065 7 file(s)

Total: 58 samples tested

Legend: ✓ Pass | ✗ Fail | ◐ Inconclusive | ⚠ Warn | ◌ Pending | – Not Tested
AI TESTING PROVENANCE (Evidence-First):
Total AI Results: 406
Samples Tested: 58
Accepted: 392
Overridden: 14
Avg Confidence: 92.6%
<70%: 0
≥90%: 300
Sample Attribute AI Result Confidence Auditor Rationale Model
AWS-IAM-REV-2026-008Policy Not Over-PermissivePASS87%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-008Identity Used RecentlyPASS90%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-008MFA EnforcedPASS93%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-008Service Account Key RotatedPASS96%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-008Cross-Account Trust ReviewedPASS99%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-008Privileged Role Elevation LoggedPASS89%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-008Access Analyzer CompletedPASS92%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-009Policy Not Over-PermissivePASS94%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-009Identity Used RecentlyPASS97%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-009MFA EnforcedPASS87%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-009Service Account Key RotatedPASS90%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-009Cross-Account Trust ReviewedPASS93%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-009Privileged Role Elevation LoggedPASS96%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-009Access Analyzer CompletedPASS99%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-010Policy Not Over-PermissivePASS88%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-010Identity Used RecentlyPASS91%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-010MFA EnforcedPASS94%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-010Service Account Key RotatedPASS97%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-010Cross-Account Trust ReviewedPASS87%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-010Privileged Role Elevation LoggedPASS90%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-010Access Analyzer CompletedPASS93%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-011Policy Not Over-PermissivePASS95%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-011Identity Used RecentlyPASS98%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-011MFA EnforcedPASS88%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-011Service Account Key RotatedPASS91%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-011Cross-Account Trust ReviewedPASS94%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-011Privileged Role Elevation LoggedPASS97%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-011Access Analyzer CompletedPASS87%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-012Policy Not Over-PermissivePASS89%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-012Identity Used RecentlyPASS92%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-012MFA EnforcedPASS95%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-012Service Account Key RotatedPASS98%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-012Cross-Account Trust ReviewedPASS88%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-012Privileged Role Elevation LoggedPASS91%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-012Access Analyzer CompletedPASS94%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-013Policy Not Over-PermissivePASS96%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-013Identity Used RecentlyPASS99%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-013MFA EnforcedPASS89%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-013Service Account Key RotatedPASS92%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-013Cross-Account Trust ReviewedPASS95%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-013Privileged Role Elevation LoggedPASS98%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-013Access Analyzer CompletedPASS83%↻ Overridden
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
AWS-IAM-REV-2026-014Policy Not Over-PermissivePASS90%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-014Identity Used RecentlyPASS93%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-014MFA EnforcedPASS96%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-014Service Account Key RotatedPASS99%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-014Cross-Account Trust ReviewedPASS89%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-014Privileged Role Elevation LoggedPASS83%↻ Overridden
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
AWS-IAM-REV-2026-014Access Analyzer CompletedPASS95%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-015Policy Not Over-PermissivePASS97%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-015Identity Used RecentlyPASS87%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-015MFA EnforcedPASS90%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-015Service Account Key RotatedPASS93%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-015Cross-Account Trust ReviewedPASS83%↻ Overridden
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
AWS-IAM-REV-2026-015Privileged Role Elevation LoggedPASS99%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-015Access Analyzer CompletedPASS89%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-016Policy Not Over-PermissivePASS91%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-016Identity Used RecentlyPASS94%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-016MFA EnforcedPASS97%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-016Service Account Key RotatedPASS83%↻ Overridden
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
AWS-IAM-REV-2026-016Cross-Account Trust ReviewedPASS90%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-016Privileged Role Elevation LoggedPASS93%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-016Access Analyzer CompletedPASS96%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-017Policy Not Over-PermissivePASS98%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-017Identity Used RecentlyPASS88%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-017MFA EnforcedPASS83%↻ Overridden
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
AWS-IAM-REV-2026-017Service Account Key RotatedPASS94%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-017Cross-Account Trust ReviewedPASS97%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-017Privileged Role Elevation LoggedPASS87%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-017Access Analyzer CompletedPASS90%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-018Policy Not Over-PermissivePASS92%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-018Identity Used RecentlyPASS83%↻ Overridden
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
AWS-IAM-REV-2026-018MFA EnforcedPASS98%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-018Service Account Key RotatedPASS88%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-018Cross-Account Trust ReviewedPASS91%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-018Privileged Role Elevation LoggedPASS94%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-018Access Analyzer CompletedPASS97%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-019Policy Not Over-PermissivePASS83%↻ Overridden
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
AWS-IAM-REV-2026-019Identity Used RecentlyPASS89%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-019MFA EnforcedPASS92%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-019Service Account Key RotatedPASS95%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-019Cross-Account Trust ReviewedPASS98%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-019Privileged Role Elevation LoggedPASS88%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-019Access Analyzer CompletedPASS91%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-020Policy Not Over-PermissivePASS93%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-020Identity Used RecentlyPASS96%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-020MFA EnforcedPASS99%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-020Service Account Key RotatedPASS89%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-020Cross-Account Trust ReviewedPASS92%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-020Privileged Role Elevation LoggedPASS95%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-020Access Analyzer CompletedPASS98%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-021Policy Not Over-PermissivePASS87%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-021Identity Used RecentlyPASS90%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-021MFA EnforcedPASS93%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-021Service Account Key RotatedPASS96%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-021Cross-Account Trust ReviewedPASS99%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-021Privileged Role Elevation LoggedPASS89%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-021Access Analyzer CompletedPASS92%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-022Policy Not Over-PermissivePASS94%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-022Identity Used RecentlyPASS97%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-022MFA EnforcedPASS87%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-022Service Account Key RotatedPASS90%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-022Cross-Account Trust ReviewedPASS93%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-022Privileged Role Elevation LoggedPASS96%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-022Access Analyzer CompletedPASS99%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-023Policy Not Over-PermissivePASS88%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-023Identity Used RecentlyPASS91%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-023MFA EnforcedPASS94%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-023Service Account Key RotatedPASS97%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-023Cross-Account Trust ReviewedPASS87%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-023Privileged Role Elevation LoggedPASS90%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-023Access Analyzer CompletedPASS93%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-024Policy Not Over-PermissivePASS95%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-024Identity Used RecentlyPASS98%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-024MFA EnforcedPASS88%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-024Service Account Key RotatedPASS91%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-024Cross-Account Trust ReviewedPASS94%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-024Privileged Role Elevation LoggedPASS97%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-024Access Analyzer CompletedPASS87%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-025Policy Not Over-PermissivePASS89%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-025Identity Used RecentlyPASS92%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-025MFA EnforcedPASS95%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-025Service Account Key RotatedPASS98%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-025Cross-Account Trust ReviewedPASS88%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-025Privileged Role Elevation LoggedPASS91%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-025Access Analyzer CompletedPASS94%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-026Policy Not Over-PermissivePASS96%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-026Identity Used RecentlyPASS99%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-026MFA EnforcedPASS89%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-026Service Account Key RotatedPASS92%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-026Cross-Account Trust ReviewedPASS95%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-026Privileged Role Elevation LoggedPASS98%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-026Access Analyzer CompletedPASS88%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-027Policy Not Over-PermissivePASS90%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-027Identity Used RecentlyPASS93%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-027MFA EnforcedPASS96%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-027Service Account Key RotatedPASS99%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-027Cross-Account Trust ReviewedPASS89%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-027Privileged Role Elevation LoggedPASS92%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-027Access Analyzer CompletedPASS95%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-028Policy Not Over-PermissivePASS97%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-028Identity Used RecentlyPASS87%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-028MFA EnforcedPASS90%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-028Service Account Key RotatedPASS93%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-028Cross-Account Trust ReviewedPASS96%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-028Privileged Role Elevation LoggedPASS99%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-028Access Analyzer CompletedPASS89%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-029Policy Not Over-PermissivePASS91%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-029Identity Used RecentlyPASS94%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-029MFA EnforcedPASS97%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-029Service Account Key RotatedPASS87%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-029Cross-Account Trust ReviewedPASS90%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-029Privileged Role Elevation LoggedPASS93%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-029Access Analyzer CompletedPASS96%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-030Policy Not Over-PermissivePASS98%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-030Identity Used RecentlyPASS88%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-030MFA EnforcedPASS91%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-030Service Account Key RotatedPASS94%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-030Cross-Account Trust ReviewedPASS97%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-030Privileged Role Elevation LoggedPASS87%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-030Access Analyzer CompletedPASS90%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-031Policy Not Over-PermissivePASS92%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-031Identity Used RecentlyPASS95%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-031MFA EnforcedPASS98%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-031Service Account Key RotatedPASS88%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-031Cross-Account Trust ReviewedPASS91%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-031Privileged Role Elevation LoggedPASS94%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-031Access Analyzer CompletedPASS97%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-032Policy Not Over-PermissivePASS99%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-032Identity Used RecentlyPASS89%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-032MFA EnforcedPASS92%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-032Service Account Key RotatedPASS95%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-032Cross-Account Trust ReviewedPASS98%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-032Privileged Role Elevation LoggedPASS88%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-032Access Analyzer CompletedPASS91%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-033Policy Not Over-PermissivePASS93%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-033Identity Used RecentlyPASS96%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-033MFA EnforcedPASS99%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-033Service Account Key RotatedPASS89%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-033Cross-Account Trust ReviewedPASS92%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-033Privileged Role Elevation LoggedPASS95%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-033Access Analyzer CompletedPASS98%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-034Policy Not Over-PermissivePASS87%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-034Identity Used RecentlyPASS90%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-034MFA EnforcedPASS93%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-034Service Account Key RotatedPASS96%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-034Cross-Account Trust ReviewedPASS99%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-034Privileged Role Elevation LoggedPASS89%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-034Access Analyzer CompletedPASS92%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-035Policy Not Over-PermissivePASS94%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-035Identity Used RecentlyPASS97%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-035MFA EnforcedPASS87%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-035Service Account Key RotatedPASS90%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-035Cross-Account Trust ReviewedPASS93%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-035Privileged Role Elevation LoggedPASS96%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-035Access Analyzer CompletedPASS99%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-036Policy Not Over-PermissivePASS88%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-036Identity Used RecentlyPASS91%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-036MFA EnforcedPASS94%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-036Service Account Key RotatedPASS97%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-036Cross-Account Trust ReviewedPASS87%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-036Privileged Role Elevation LoggedPASS90%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-036Access Analyzer CompletedPASS93%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-037Policy Not Over-PermissivePASS95%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-037Identity Used RecentlyPASS98%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-037MFA EnforcedPASS88%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-037Service Account Key RotatedPASS91%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-037Cross-Account Trust ReviewedPASS94%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-037Privileged Role Elevation LoggedPASS97%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-037Access Analyzer CompletedPASS87%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-038Policy Not Over-PermissivePASS89%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-038Identity Used RecentlyPASS92%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-038MFA EnforcedPASS95%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-038Service Account Key RotatedPASS98%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-038Cross-Account Trust ReviewedPASS88%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-038Privileged Role Elevation LoggedPASS91%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-038Access Analyzer CompletedPASS94%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-039Policy Not Over-PermissivePASS96%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-039Identity Used RecentlyPASS99%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-039MFA EnforcedPASS89%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-039Service Account Key RotatedPASS92%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-039Cross-Account Trust ReviewedPASS95%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-039Privileged Role Elevation LoggedPASS98%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-039Access Analyzer CompletedPASS88%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-040Policy Not Over-PermissivePASS90%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-040Identity Used RecentlyPASS93%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-040MFA EnforcedPASS96%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-040Service Account Key RotatedPASS99%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-040Cross-Account Trust ReviewedPASS89%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-040Privileged Role Elevation LoggedPASS92%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-040Access Analyzer CompletedPASS95%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-041Policy Not Over-PermissivePASS97%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-041Identity Used RecentlyPASS87%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-041MFA EnforcedPASS90%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-041Service Account Key RotatedPASS93%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-041Cross-Account Trust ReviewedPASS96%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-041Privileged Role Elevation LoggedPASS99%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-041Access Analyzer CompletedPASS89%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-042Policy Not Over-PermissivePASS91%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-042Identity Used RecentlyPASS94%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-042MFA EnforcedPASS97%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-042Service Account Key RotatedPASS87%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-042Cross-Account Trust ReviewedPASS90%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-042Privileged Role Elevation LoggedPASS93%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-042Access Analyzer CompletedPASS96%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-043Policy Not Over-PermissivePASS98%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-043Identity Used RecentlyPASS88%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-043MFA EnforcedPASS91%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-043Service Account Key RotatedPASS94%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-043Cross-Account Trust ReviewedPASS97%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-043Privileged Role Elevation LoggedPASS87%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-043Access Analyzer CompletedPASS90%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-044Policy Not Over-PermissivePASS92%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-044Identity Used RecentlyPASS95%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-044MFA EnforcedPASS98%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-044Service Account Key RotatedPASS88%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-044Cross-Account Trust ReviewedPASS91%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-044Privileged Role Elevation LoggedPASS94%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-044Access Analyzer CompletedPASS97%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-045Policy Not Over-PermissivePASS99%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-045Identity Used RecentlyPASS89%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-045MFA EnforcedPASS92%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-045Service Account Key RotatedPASS95%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-045Cross-Account Trust ReviewedPASS98%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-045Privileged Role Elevation LoggedPASS88%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-045Access Analyzer CompletedPASS91%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-046Policy Not Over-PermissivePASS93%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-046Identity Used RecentlyPASS96%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-046MFA EnforcedPASS99%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-046Service Account Key RotatedPASS89%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-046Cross-Account Trust ReviewedPASS92%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-046Privileged Role Elevation LoggedPASS95%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-046Access Analyzer CompletedPASS98%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-047Policy Not Over-PermissivePASS87%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-047Identity Used RecentlyPASS90%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-047MFA EnforcedPASS93%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-047Service Account Key RotatedPASS96%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-047Cross-Account Trust ReviewedPASS99%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-047Privileged Role Elevation LoggedPASS89%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-047Access Analyzer CompletedPASS92%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-048Policy Not Over-PermissivePASS94%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-048Identity Used RecentlyPASS97%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-048MFA EnforcedPASS87%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-048Service Account Key RotatedPASS90%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-048Cross-Account Trust ReviewedPASS93%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-048Privileged Role Elevation LoggedPASS96%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-048Access Analyzer CompletedPASS82%↻ Overridden
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-049Policy Not Over-PermissivePASS88%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-049Identity Used RecentlyPASS91%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-049MFA EnforcedPASS94%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-049Service Account Key RotatedPASS97%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-049Cross-Account Trust ReviewedPASS87%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-049Privileged Role Elevation LoggedPASS82%↻ Overridden
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-049Access Analyzer CompletedPASS93%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-050Policy Not Over-PermissivePASS95%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-050Identity Used RecentlyPASS98%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-050MFA EnforcedPASS88%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-050Service Account Key RotatedPASS91%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-050Cross-Account Trust ReviewedPASS82%↻ Overridden
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-050Privileged Role Elevation LoggedPASS97%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-050Access Analyzer CompletedPASS87%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-051Policy Not Over-PermissivePASS89%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-051Identity Used RecentlyPASS92%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-051MFA EnforcedPASS95%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-051Service Account Key RotatedPASS82%↻ Overridden
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-051Cross-Account Trust ReviewedPASS88%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-051Privileged Role Elevation LoggedPASS91%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-051Access Analyzer CompletedPASS94%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-052Policy Not Over-PermissivePASS96%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-052Identity Used RecentlyPASS99%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-052MFA EnforcedPASS82%↻ Overridden
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-052Service Account Key RotatedPASS92%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-052Cross-Account Trust ReviewedPASS95%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-052Privileged Role Elevation LoggedPASS98%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-052Access Analyzer CompletedPASS88%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-053Policy Not Over-PermissivePASS90%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-053Identity Used RecentlyPASS82%↻ Overridden
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-053MFA EnforcedPASS96%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-053Service Account Key RotatedPASS99%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-053Cross-Account Trust ReviewedPASS89%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-053Privileged Role Elevation LoggedPASS92%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-053Access Analyzer CompletedPASS95%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-054Policy Not Over-PermissivePASS82%↻ Overridden
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-054Identity Used RecentlyPASS87%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-054MFA EnforcedPASS90%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-054Service Account Key RotatedPASS93%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-054Cross-Account Trust ReviewedPASS96%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-054Privileged Role Elevation LoggedPASS99%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-054Access Analyzer CompletedPASS89%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-055Policy Not Over-PermissivePASS91%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-055Identity Used RecentlyPASS94%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-055MFA EnforcedPASS97%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-055Service Account Key RotatedPASS87%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-055Cross-Account Trust ReviewedPASS90%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-055Privileged Role Elevation LoggedPASS93%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-055Access Analyzer CompletedPASS96%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-056Policy Not Over-PermissivePASS98%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-056Identity Used RecentlyPASS88%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-056MFA EnforcedPASS91%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-056Service Account Key RotatedPASS94%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-056Cross-Account Trust ReviewedPASS97%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-056Privileged Role Elevation LoggedPASS87%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-056Access Analyzer CompletedPASS90%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-057Policy Not Over-PermissivePASS92%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-057Identity Used RecentlyPASS95%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-057MFA EnforcedPASS98%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-057Service Account Key RotatedPASS88%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-057Cross-Account Trust ReviewedPASS91%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-057Privileged Role Elevation LoggedPASS94%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-057Access Analyzer CompletedPASS97%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-058Policy Not Over-PermissivePASS99%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-058Identity Used RecentlyPASS89%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-058MFA EnforcedPASS92%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-058Service Account Key RotatedPASS95%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-058Cross-Account Trust ReviewedPASS98%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-058Privileged Role Elevation LoggedPASS88%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-058Access Analyzer CompletedPASS91%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-059Policy Not Over-PermissivePASS93%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-059Identity Used RecentlyPASS96%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-059MFA EnforcedPASS99%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-059Service Account Key RotatedPASS89%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-059Cross-Account Trust ReviewedPASS92%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-059Privileged Role Elevation LoggedPASS95%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-059Access Analyzer CompletedPASS98%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-060Policy Not Over-PermissivePASS87%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-060Identity Used RecentlyPASS90%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-060MFA EnforcedPASS93%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-060Service Account Key RotatedPASS96%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-060Cross-Account Trust ReviewedPASS99%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-060Privileged Role Elevation LoggedPASS89%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-060Access Analyzer CompletedPASS92%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-061Policy Not Over-PermissivePASS94%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-061Identity Used RecentlyPASS97%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-061MFA EnforcedPASS87%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-061Service Account Key RotatedPASS90%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-061Cross-Account Trust ReviewedPASS93%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-061Privileged Role Elevation LoggedPASS96%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-061Access Analyzer CompletedPASS99%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-062Policy Not Over-PermissivePASS88%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-062Identity Used RecentlyPASS91%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-062MFA EnforcedPASS94%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-062Service Account Key RotatedPASS97%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-062Cross-Account Trust ReviewedPASS87%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-062Privileged Role Elevation LoggedPASS90%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-062Access Analyzer CompletedPASS93%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-063Policy Not Over-PermissivePASS95%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-063Identity Used RecentlyPASS98%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-063MFA EnforcedPASS88%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-063Service Account Key RotatedPASS91%✓ Accepted
by Sarah Kim, CPA on 23 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-063Cross-Account Trust ReviewedPASS94%✓ Accepted
by Sarah Kim, CPA on 7 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-063Privileged Role Elevation LoggedPASS97%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-063Access Analyzer CompletedPASS87%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-064Policy Not Over-PermissivePASS89%✓ Accepted
by Sarah Kim, CPA on 22 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-064Identity Used RecentlyPASS92%✓ Accepted
by Sarah Kim, CPA on 6 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-064MFA EnforcedPASS95%✓ Accepted
by Sarah Kim, CPA on 28 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-064Service Account Key RotatedPASS98%✓ Accepted
by Sarah Kim, CPA on 5 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-064Cross-Account Trust ReviewedPASS88%✓ Accepted
by Sarah Kim, CPA on 27 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-064Privileged Role Elevation LoggedPASS91%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-064Access Analyzer CompletedPASS94%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-065Policy Not Over-PermissivePASS96%✓ Accepted
by Sarah Kim, CPA on 4 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-065Identity Used RecentlyPASS99%✓ Accepted
by Sarah Kim, CPA on 26 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-065MFA EnforcedPASS89%✓ Accepted
by Sarah Kim, CPA on 3 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6
AWS-IAM-REV-2026-065Service Account Key RotatedPASS92%✓ Accepted
by Sarah Kim, CPA on 25 Oct 2026, 10:00 UTC
Evidence directly confirms attribute. Manager approval recorded in ticket workflow with timestamp prior to provisioning event. Role mapped to Job Role Matrix entry verbatim.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-065Cross-Account Trust ReviewedPASS95%✓ Accepted
by Sarah Kim, CPA on 9 Nov 2026, 10:00 UTC
Approval-by-authorized-party verified via Okta access-request audit trail; access grant matches role-matrix entry within the joiner SLA window.claude-sonnet-4-6
AWS-IAM-REV-2026-065Privileged Role Elevation LoggedPASS98%✓ Accepted
by Sarah Kim, CPA on 24 Oct 2026, 10:00 UTC
Pass. Quarterly UAR completion attested by control owner within 5-business-day SLA; inappropriate access removed and documented.claude-haiku-4-5-20251001
AWS-IAM-REV-2026-065Access Analyzer CompletedPASS88%✓ Accepted
by Sarah Kim, CPA on 8 Nov 2026, 10:00 UTC
AWS IAM policy review evidence shows quarterly attestation by Cloud Infrastructure + Security Engineering; no over-privileged grants flagged.claude-sonnet-4-6

Total: 406 AI test results

Note: All AI test results require auditor review before conclusions can be locked (Evidence-First methodology).
C1 Normal Change Approvals Locked
Effective with Exceptions
WP-Ref: WP-APXFG-2026-ITGC-C1 | System: GitHub Enterprise | Category: Change Management | Population: 287 | Samples: 100 | Signed off by: Sarah Kim, CPA on 2 Apr 2027

Verifies that normal changes have proper approvals, testing, and implementation evidence.

CONCLUSION NARRATIVE:

We tested production change controls covering the period 1 January 2026 through 31 December 2026 for Apex Financial Group's in-scope financial-reporting systems. The population comprises 287 production change tickets recorded in Jira and GitHub; we selected 100 sample items using a random-selection method consistent with the firm's sample-size methodology guide §SAM-04 (10% tolerable deviation rate, 1% expected deviation rate, 5% risk of overreliance for HIGH-risk change controls). During FY2026 the entity recorded 14 emergency changes against 273 standard changes; the selection oversampled the emergency-path subset per the firm's risk-of-overreliance methodology, with one emergency change drawn into the tested 100 (CHG-2026-1059, the Sev-1 payment-processing latency response on 14 August 2026). Testing results: 99 of 100 sampled changes met all four control attributes — change request filed, approval recorded, testing evidence attached, and implementation evidence documented (Change Management Policy v4.1, Section 5: Production Change Lifecycle). One sample (CHG-2026-1059) followed the emergency-change carve-out at Section 5.4 and failed the standard Approval attribute: the pre-deployment CAB approval path was not followed (detection at 03:30 UTC, deployment at 03:45 UTC), with a post-implementation review filed within 24 hours (PIR-2026-0815) and CAB ratification at the next scheduled meeting on 21 August 2026. The observed standard-path deviation rate is 0 of 99 (0.0%); the policy-compliant emergency carve-out is documented as a Control Deficiency by classification but is not counted as a deviation against the standard-path control objective. Exception analysis: the emergency-bypass invocation is policy-compliant — Section 5.4 expressly authorizes pre-deployment CAB bypass for Sev-1 incidents conditional on a 24-hour PIR and next-CAB ratification, both of which we verified in evidence. Per the AICPA AU-C 940 deficiency-evaluation framework, the carve-out invocation is a Control Deficiency by classification because the standard pre-deployment authorization path was not followed; however, the compensating PIR-plus-ratification design provides reasonable assurance that the deviation did not undermine the control objective, and the deficiency does not rise to a Significant Deficiency or Material Weakness. We conclude the control operated effectively during the period 1 January 2026 – 31 December 2026 in all material respects relevant to the entity's IT General Controls over financial reporting, with the policy-compliant emergency-change carve-out documented above.

ATTRIBUTE-LEVEL TESTING RESULTS:
Sample Change Request Approval Testing Evidence Implementation Evidence Evidence
CHG-2026-1042 4 file(s)
CHG-2026-1043 4 file(s)
CHG-2026-1044 4 file(s)
CHG-2026-1045 4 file(s)
CHG-2026-1046 4 file(s)
CHG-2026-1047 4 file(s)
CHG-2026-1048 4 file(s)
CHG-2026-1049 4 file(s)
CHG-2026-1050 4 file(s)
CHG-2026-1051 4 file(s)
CHG-2026-1052 4 file(s)
CHG-2026-1053 4 file(s)
CHG-2026-1054 4 file(s)
CHG-2026-1055 4 file(s)
CHG-2026-1056 4 file(s)
CHG-2026-1057 4 file(s)
CHG-2026-1058 4 file(s)
CHG-2026-1059 4 file(s)
CHG-2026-1060 4 file(s)
CHG-2026-1061 4 file(s)
CHG-2026-1062 4 file(s)
CHG-2026-1063 4 file(s)
CHG-2026-1064 4 file(s)
CHG-2026-1065 4 file(s)
CHG-2026-1066 4 file(s)
CHG-2026-1067 4 file(s)
CHG-2026-1068 4 file(s)
CHG-2026-1069 4 file(s)
CHG-2026-1070 4 file(s)
CHG-2026-1071 4 file(s)
CHG-2026-1072 4 file(s)
CHG-2026-1073 4 file(s)
CHG-2026-1074 4 file(s)
CHG-2026-1075 4 file(s)
CHG-2026-1076 4 file(s)
CHG-2026-1077 4 file(s)
CHG-2026-1078 4 file(s)
CHG-2026-1079 4 file(s)
CHG-2026-1080 4 file(s)
CHG-2026-1081 4 file(s)
CHG-2026-1082 4 file(s)
CHG-2026-1083 4 file(s)
CHG-2026-1084 4 file(s)
CHG-2026-1085 4 file(s)
CHG-2026-1086 4 file(s)
CHG-2026-1087 4 file(s)
CHG-2026-1088 4 file(s)
CHG-2026-1089 4 file(s)
CHG-2026-1090 4 file(s)
CHG-2026-1091 4 file(s)
CHG-2026-1092 4 file(s)
CHG-2026-1093 4 file(s)
CHG-2026-1094 4 file(s)
CHG-2026-1095 4 file(s)
CHG-2026-1096 4 file(s)
CHG-2026-1097 4 file(s)
CHG-2026-1098 4 file(s)
CHG-2026-1099 4 file(s)
CHG-2026-1100 4 file(s)
CHG-2026-1101 4 file(s)
CHG-2026-1102 4 file(s)
CHG-2026-1103 4 file(s)
CHG-2026-1104 4 file(s)
CHG-2026-1105 4 file(s)
CHG-2026-1106 4 file(s)
CHG-2026-1107 4 file(s)
CHG-2026-1108 4 file(s)
CHG-2026-1109 4 file(s)
CHG-2026-1110 4 file(s)
CHG-2026-1111 4 file(s)
CHG-2026-1112 4 file(s)
CHG-2026-1113 4 file(s)
CHG-2026-1114 4 file(s)
CHG-2026-1115 4 file(s)
CHG-2026-1116 4 file(s)
CHG-2026-1117 4 file(s)
CHG-2026-1118 4 file(s)
CHG-2026-1119 4 file(s)
CHG-2026-1120 4 file(s)
CHG-2026-1121 4 file(s)
CHG-2026-1122 4 file(s)
CHG-2026-1123 4 file(s)
CHG-2026-1124 4 file(s)
CHG-2026-1125 4 file(s)
CHG-2026-1126 4 file(s)
CHG-2026-1127 4 file(s)
CHG-2026-1128 4 file(s)
CHG-2026-1129 4 file(s)
CHG-2026-1130 4 file(s)
CHG-2026-1131 4 file(s)
CHG-2026-1132 4 file(s)
CHG-2026-1133 4 file(s)
CHG-2026-1134 4 file(s)
CHG-2026-1135 4 file(s)
CHG-2026-1136 4 file(s)
CHG-2026-1137 4 file(s)
CHG-2026-1138 4 file(s)
CHG-2026-1139 4 file(s)
CHG-2026-1140 4 file(s)
CHG-2026-1141 4 file(s)

Total: 100 samples tested

Legend: ✓ Pass | ✗ Fail | ◐ Inconclusive | ⚠ Warn | ◌ Pending | – Not Tested
AI TESTING PROVENANCE (Evidence-First):
Total AI Results: 400
Samples Tested: 100
Accepted: 388 (1 exceptions)
Overridden: 12
Avg Confidence: 92.6%
<70%: 0
≥90%: 299
Sample Attribute AI Result Confidence Auditor Rationale Model
CHG-2026-1042Change RequestPASS87%✓ Accepted
by Sarah Kim, CPA on 10 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1042ApprovalPASS90%✓ Accepted
by Sarah Kim, CPA on 20 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1042Testing EvidencePASS93%✓ Accepted
by Sarah Kim, CPA on 30 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1042Implementation EvidencePASS96%✓ Accepted
by Sarah Kim, CPA on 3 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1043Change RequestPASS94%✓ Accepted
by Sarah Kim, CPA on 18 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1043ApprovalPASS97%✓ Accepted
by Sarah Kim, CPA on 28 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1043Testing EvidencePASS87%✓ Accepted
by Sarah Kim, CPA on 1 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1043Implementation EvidencePASS90%✓ Accepted
by Sarah Kim, CPA on 13 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1044Change RequestPASS88%✓ Accepted
by Sarah Kim, CPA on 26 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1044ApprovalPASS91%✓ Accepted
by Sarah Kim, CPA on 6 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1044Testing EvidencePASS94%✓ Accepted
by Sarah Kim, CPA on 11 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1044Implementation EvidencePASS97%✓ Accepted
by Sarah Kim, CPA on 21 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1045Change RequestPASS95%✓ Accepted
by Sarah Kim, CPA on 4 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1045ApprovalPASS98%✓ Accepted
by Sarah Kim, CPA on 16 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1045Testing EvidencePASS88%✓ Accepted
by Sarah Kim, CPA on 19 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1045Implementation EvidencePASS91%✓ Accepted
by Sarah Kim, CPA on 29 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1046Change RequestPASS89%✓ Accepted
by Sarah Kim, CPA on 14 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1046ApprovalPASS92%✓ Accepted
by Sarah Kim, CPA on 17 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1046Testing EvidencePASS95%✓ Accepted
by Sarah Kim, CPA on 27 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1046Implementation EvidencePASS98%✓ Accepted
by Sarah Kim, CPA on 7 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1047Change RequestPASS96%✓ Accepted
by Sarah Kim, CPA on 22 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1047ApprovalPASS99%✓ Accepted
by Sarah Kim, CPA on 25 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1047Testing EvidencePASS89%✓ Accepted
by Sarah Kim, CPA on 5 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1047Implementation EvidencePASS92%✓ Accepted
by Sarah Kim, CPA on 10 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1048Change RequestPASS90%✓ Accepted
by Sarah Kim, CPA on 30 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1048ApprovalPASS93%✓ Accepted
by Sarah Kim, CPA on 3 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1048Testing EvidencePASS96%✓ Accepted
by Sarah Kim, CPA on 15 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1048Implementation EvidencePASS99%✓ Accepted
by Sarah Kim, CPA on 18 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1049Change RequestPASS97%✓ Accepted
by Sarah Kim, CPA on 1 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1049ApprovalPASS87%✓ Accepted
by Sarah Kim, CPA on 13 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1049Testing EvidencePASS90%✓ Accepted
by Sarah Kim, CPA on 23 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1049Implementation EvidencePASS93%✓ Accepted
by Sarah Kim, CPA on 26 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1050Change RequestPASS91%✓ Accepted
by Sarah Kim, CPA on 11 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1050ApprovalPASS94%✓ Accepted
by Sarah Kim, CPA on 21 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1050Testing EvidencePASS97%✓ Accepted
by Sarah Kim, CPA on 24 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1050Implementation EvidencePASS83%↻ Overridden
by Sarah Kim, CPA on 4 Dec 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
CHG-2026-1051Change RequestPASS98%✓ Accepted
by Sarah Kim, CPA on 19 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1051ApprovalPASS88%✓ Accepted
by Sarah Kim, CPA on 29 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1051Testing EvidencePASS83%↻ Overridden
by Sarah Kim, CPA on 2 Dec 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
CHG-2026-1051Implementation EvidencePASS94%✓ Accepted
by Sarah Kim, CPA on 14 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1052Change RequestPASS92%✓ Accepted
by Sarah Kim, CPA on 27 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1052ApprovalPASS83%↻ Overridden
by Sarah Kim, CPA on 7 Dec 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
CHG-2026-1052Testing EvidencePASS98%✓ Accepted
by Sarah Kim, CPA on 12 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1052Implementation EvidencePASS88%✓ Accepted
by Sarah Kim, CPA on 22 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1053Change RequestPASS83%↻ Overridden
by Sarah Kim, CPA on 5 Dec 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
CHG-2026-1053ApprovalPASS89%✓ Accepted
by Sarah Kim, CPA on 10 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1053Testing EvidencePASS92%✓ Accepted
by Sarah Kim, CPA on 20 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1053Implementation EvidencePASS95%✓ Accepted
by Sarah Kim, CPA on 30 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1054Change RequestPASS93%✓ Accepted
by Sarah Kim, CPA on 15 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1054ApprovalPASS96%✓ Accepted
by Sarah Kim, CPA on 18 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1054Testing EvidencePASS99%✓ Accepted
by Sarah Kim, CPA on 28 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1054Implementation EvidencePASS89%✓ Accepted
by Sarah Kim, CPA on 1 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1055Change RequestPASS87%✓ Accepted
by Sarah Kim, CPA on 23 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1055ApprovalPASS90%✓ Accepted
by Sarah Kim, CPA on 26 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1055Testing EvidencePASS93%✓ Accepted
by Sarah Kim, CPA on 6 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1055Implementation EvidencePASS96%✓ Accepted
by Sarah Kim, CPA on 11 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1056Change RequestPASS94%✓ Accepted
by Sarah Kim, CPA on 24 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1056ApprovalPASS97%✓ Accepted
by Sarah Kim, CPA on 4 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1056Testing EvidencePASS87%✓ Accepted
by Sarah Kim, CPA on 16 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1056Implementation EvidencePASS90%✓ Accepted
by Sarah Kim, CPA on 19 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1057Change RequestPASS88%✓ Accepted
by Sarah Kim, CPA on 2 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1057ApprovalPASS91%✓ Accepted
by Sarah Kim, CPA on 14 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1057Testing EvidencePASS94%✓ Accepted
by Sarah Kim, CPA on 17 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1057Implementation EvidencePASS97%✓ Accepted
by Sarah Kim, CPA on 27 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1058Change RequestPASS95%✓ Accepted
by Sarah Kim, CPA on 12 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1058ApprovalPASS98%✓ Accepted
by Sarah Kim, CPA on 22 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1058Testing EvidencePASS88%✓ Accepted
by Sarah Kim, CPA on 25 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1058Implementation EvidencePASS91%✓ Accepted
by Sarah Kim, CPA on 5 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1059Change RequestPASS89%✓ Accepted
by Sarah Kim, CPA on 20 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1059ApprovalFAIL93%✓ Accepted (Exception)
by Sarah Kim, CPA on 30 Nov 2026, 10:00 UTC
CAB approval timestamp post-dates deployment by 2 hours — deployment occurred prior to formal approval. Policy non-compliance.claude-haiku-4-5-20251001
CHG-2026-1059Testing EvidencePASS95%✓ Accepted
by Sarah Kim, CPA on 3 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1059Implementation EvidencePASS98%✓ Accepted
by Sarah Kim, CPA on 15 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1060Change RequestPASS96%✓ Accepted
by Sarah Kim, CPA on 28 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1060ApprovalPASS99%✓ Accepted
by Sarah Kim, CPA on 1 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1060Testing EvidencePASS89%✓ Accepted
by Sarah Kim, CPA on 13 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1060Implementation EvidencePASS92%✓ Accepted
by Sarah Kim, CPA on 23 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1061Change RequestPASS90%✓ Accepted
by Sarah Kim, CPA on 6 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1061ApprovalPASS93%✓ Accepted
by Sarah Kim, CPA on 11 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1061Testing EvidencePASS96%✓ Accepted
by Sarah Kim, CPA on 21 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1061Implementation EvidencePASS99%✓ Accepted
by Sarah Kim, CPA on 24 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1062Change RequestPASS97%✓ Accepted
by Sarah Kim, CPA on 16 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1062ApprovalPASS87%✓ Accepted
by Sarah Kim, CPA on 19 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1062Testing EvidencePASS90%✓ Accepted
by Sarah Kim, CPA on 29 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1062Implementation EvidencePASS93%✓ Accepted
by Sarah Kim, CPA on 2 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1063Change RequestPASS91%✓ Accepted
by Sarah Kim, CPA on 17 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1063ApprovalPASS94%✓ Accepted
by Sarah Kim, CPA on 27 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1063Testing EvidencePASS97%✓ Accepted
by Sarah Kim, CPA on 7 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1063Implementation EvidencePASS87%✓ Accepted
by Sarah Kim, CPA on 12 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1064Change RequestPASS98%✓ Accepted
by Sarah Kim, CPA on 25 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1064ApprovalPASS88%✓ Accepted
by Sarah Kim, CPA on 5 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1064Testing EvidencePASS91%✓ Accepted
by Sarah Kim, CPA on 10 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1064Implementation EvidencePASS94%✓ Accepted
by Sarah Kim, CPA on 20 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1065Change RequestPASS92%✓ Accepted
by Sarah Kim, CPA on 3 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1065ApprovalPASS95%✓ Accepted
by Sarah Kim, CPA on 15 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1065Testing EvidencePASS98%✓ Accepted
by Sarah Kim, CPA on 18 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1065Implementation EvidencePASS88%✓ Accepted
by Sarah Kim, CPA on 28 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1066Change RequestPASS99%✓ Accepted
by Sarah Kim, CPA on 13 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1066ApprovalPASS89%✓ Accepted
by Sarah Kim, CPA on 23 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1066Testing EvidencePASS92%✓ Accepted
by Sarah Kim, CPA on 26 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1066Implementation EvidencePASS95%✓ Accepted
by Sarah Kim, CPA on 6 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1067Change RequestPASS93%✓ Accepted
by Sarah Kim, CPA on 21 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1067ApprovalPASS96%✓ Accepted
by Sarah Kim, CPA on 24 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1067Testing EvidencePASS99%✓ Accepted
by Sarah Kim, CPA on 4 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1067Implementation EvidencePASS89%✓ Accepted
by Sarah Kim, CPA on 16 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1068Change RequestPASS87%✓ Accepted
by Sarah Kim, CPA on 29 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1068ApprovalPASS90%✓ Accepted
by Sarah Kim, CPA on 2 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1068Testing EvidencePASS93%✓ Accepted
by Sarah Kim, CPA on 14 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1068Implementation EvidencePASS96%✓ Accepted
by Sarah Kim, CPA on 17 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1069Change RequestPASS94%✓ Accepted
by Sarah Kim, CPA on 7 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1069ApprovalPASS97%✓ Accepted
by Sarah Kim, CPA on 12 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1069Testing EvidencePASS87%✓ Accepted
by Sarah Kim, CPA on 22 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1069Implementation EvidencePASS90%✓ Accepted
by Sarah Kim, CPA on 25 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1070Change RequestPASS88%✓ Accepted
by Sarah Kim, CPA on 10 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1070ApprovalPASS91%✓ Accepted
by Sarah Kim, CPA on 20 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1070Testing EvidencePASS94%✓ Accepted
by Sarah Kim, CPA on 30 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1070Implementation EvidencePASS97%✓ Accepted
by Sarah Kim, CPA on 3 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1071Change RequestPASS95%✓ Accepted
by Sarah Kim, CPA on 18 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1071ApprovalPASS98%✓ Accepted
by Sarah Kim, CPA on 28 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1071Testing EvidencePASS88%✓ Accepted
by Sarah Kim, CPA on 1 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1071Implementation EvidencePASS91%✓ Accepted
by Sarah Kim, CPA on 13 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1072Change RequestPASS89%✓ Accepted
by Sarah Kim, CPA on 26 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1072ApprovalPASS92%✓ Accepted
by Sarah Kim, CPA on 6 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1072Testing EvidencePASS95%✓ Accepted
by Sarah Kim, CPA on 11 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1072Implementation EvidencePASS98%✓ Accepted
by Sarah Kim, CPA on 21 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1073Change RequestPASS96%✓ Accepted
by Sarah Kim, CPA on 4 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1073ApprovalPASS99%✓ Accepted
by Sarah Kim, CPA on 16 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1073Testing EvidencePASS89%✓ Accepted
by Sarah Kim, CPA on 19 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1073Implementation EvidencePASS92%✓ Accepted
by Sarah Kim, CPA on 29 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1074Change RequestPASS90%✓ Accepted
by Sarah Kim, CPA on 14 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1074ApprovalPASS93%✓ Accepted
by Sarah Kim, CPA on 17 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1074Testing EvidencePASS96%✓ Accepted
by Sarah Kim, CPA on 27 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1074Implementation EvidencePASS99%✓ Accepted
by Sarah Kim, CPA on 7 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1075Change RequestPASS97%✓ Accepted
by Sarah Kim, CPA on 22 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1075ApprovalPASS87%✓ Accepted
by Sarah Kim, CPA on 25 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1075Testing EvidencePASS90%✓ Accepted
by Sarah Kim, CPA on 5 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1075Implementation EvidencePASS93%✓ Accepted
by Sarah Kim, CPA on 10 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1076Change RequestPASS91%✓ Accepted
by Sarah Kim, CPA on 30 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1076ApprovalPASS94%✓ Accepted
by Sarah Kim, CPA on 3 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1076Testing EvidencePASS97%✓ Accepted
by Sarah Kim, CPA on 15 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1076Implementation EvidencePASS87%✓ Accepted
by Sarah Kim, CPA on 18 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1077Change RequestPASS98%✓ Accepted
by Sarah Kim, CPA on 1 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1077ApprovalPASS88%✓ Accepted
by Sarah Kim, CPA on 13 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1077Testing EvidencePASS91%✓ Accepted
by Sarah Kim, CPA on 23 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1077Implementation EvidencePASS94%✓ Accepted
by Sarah Kim, CPA on 26 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1078Change RequestPASS92%✓ Accepted
by Sarah Kim, CPA on 11 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1078ApprovalPASS95%✓ Accepted
by Sarah Kim, CPA on 21 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1078Testing EvidencePASS98%✓ Accepted
by Sarah Kim, CPA on 24 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1078Implementation EvidencePASS88%✓ Accepted
by Sarah Kim, CPA on 4 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1079Change RequestPASS99%✓ Accepted
by Sarah Kim, CPA on 19 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1079ApprovalPASS89%✓ Accepted
by Sarah Kim, CPA on 29 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1079Testing EvidencePASS92%✓ Accepted
by Sarah Kim, CPA on 2 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1079Implementation EvidencePASS95%✓ Accepted
by Sarah Kim, CPA on 14 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1080Change RequestPASS93%✓ Accepted
by Sarah Kim, CPA on 27 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1080ApprovalPASS96%✓ Accepted
by Sarah Kim, CPA on 7 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1080Testing EvidencePASS99%✓ Accepted
by Sarah Kim, CPA on 12 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1080Implementation EvidencePASS89%✓ Accepted
by Sarah Kim, CPA on 22 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1081Change RequestPASS87%✓ Accepted
by Sarah Kim, CPA on 5 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1081ApprovalPASS90%✓ Accepted
by Sarah Kim, CPA on 10 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1081Testing EvidencePASS93%✓ Accepted
by Sarah Kim, CPA on 20 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1081Implementation EvidencePASS96%✓ Accepted
by Sarah Kim, CPA on 30 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1082Change RequestPASS94%✓ Accepted
by Sarah Kim, CPA on 15 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1082ApprovalPASS97%✓ Accepted
by Sarah Kim, CPA on 18 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1082Testing EvidencePASS87%✓ Accepted
by Sarah Kim, CPA on 28 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1082Implementation EvidencePASS90%✓ Accepted
by Sarah Kim, CPA on 1 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1083Change RequestPASS88%✓ Accepted
by Sarah Kim, CPA on 23 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1083ApprovalPASS91%✓ Accepted
by Sarah Kim, CPA on 26 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1083Testing EvidencePASS94%✓ Accepted
by Sarah Kim, CPA on 6 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1083Implementation EvidencePASS97%✓ Accepted
by Sarah Kim, CPA on 11 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1084Change RequestPASS95%✓ Accepted
by Sarah Kim, CPA on 24 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1084ApprovalPASS98%✓ Accepted
by Sarah Kim, CPA on 4 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1084Testing EvidencePASS88%✓ Accepted
by Sarah Kim, CPA on 16 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1084Implementation EvidencePASS91%✓ Accepted
by Sarah Kim, CPA on 19 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1085Change RequestPASS89%✓ Accepted
by Sarah Kim, CPA on 2 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1085ApprovalPASS92%✓ Accepted
by Sarah Kim, CPA on 14 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1085Testing EvidencePASS95%✓ Accepted
by Sarah Kim, CPA on 17 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1085Implementation EvidencePASS82%↻ Overridden
by Sarah Kim, CPA on 27 Nov 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
CHG-2026-1086Change RequestPASS96%✓ Accepted
by Sarah Kim, CPA on 12 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1086ApprovalPASS99%✓ Accepted
by Sarah Kim, CPA on 22 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1086Testing EvidencePASS82%↻ Overridden
by Sarah Kim, CPA on 25 Nov 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
CHG-2026-1086Implementation EvidencePASS92%✓ Accepted
by Sarah Kim, CPA on 5 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1087Change RequestPASS90%✓ Accepted
by Sarah Kim, CPA on 20 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1087ApprovalPASS82%↻ Overridden
by Sarah Kim, CPA on 30 Nov 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
CHG-2026-1087Testing EvidencePASS96%✓ Accepted
by Sarah Kim, CPA on 3 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1087Implementation EvidencePASS99%✓ Accepted
by Sarah Kim, CPA on 15 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1088Change RequestPASS82%↻ Overridden
by Sarah Kim, CPA on 28 Nov 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
CHG-2026-1088ApprovalPASS87%✓ Accepted
by Sarah Kim, CPA on 1 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1088Testing EvidencePASS90%✓ Accepted
by Sarah Kim, CPA on 13 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1088Implementation EvidencePASS93%✓ Accepted
by Sarah Kim, CPA on 23 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1089Change RequestPASS91%✓ Accepted
by Sarah Kim, CPA on 6 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1089ApprovalPASS94%✓ Accepted
by Sarah Kim, CPA on 11 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1089Testing EvidencePASS97%✓ Accepted
by Sarah Kim, CPA on 21 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1089Implementation EvidencePASS87%✓ Accepted
by Sarah Kim, CPA on 24 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1090Change RequestPASS98%✓ Accepted
by Sarah Kim, CPA on 16 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1090ApprovalPASS88%✓ Accepted
by Sarah Kim, CPA on 19 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1090Testing EvidencePASS91%✓ Accepted
by Sarah Kim, CPA on 29 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1090Implementation EvidencePASS94%✓ Accepted
by Sarah Kim, CPA on 2 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1091Change RequestPASS92%✓ Accepted
by Sarah Kim, CPA on 17 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1091ApprovalPASS95%✓ Accepted
by Sarah Kim, CPA on 27 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1091Testing EvidencePASS98%✓ Accepted
by Sarah Kim, CPA on 7 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1091Implementation EvidencePASS88%✓ Accepted
by Sarah Kim, CPA on 12 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1092Change RequestPASS99%✓ Accepted
by Sarah Kim, CPA on 25 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1092ApprovalPASS89%✓ Accepted
by Sarah Kim, CPA on 5 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1092Testing EvidencePASS92%✓ Accepted
by Sarah Kim, CPA on 10 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1092Implementation EvidencePASS95%✓ Accepted
by Sarah Kim, CPA on 20 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1093Change RequestPASS93%✓ Accepted
by Sarah Kim, CPA on 3 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1093ApprovalPASS96%✓ Accepted
by Sarah Kim, CPA on 15 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1093Testing EvidencePASS99%✓ Accepted
by Sarah Kim, CPA on 18 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1093Implementation EvidencePASS89%✓ Accepted
by Sarah Kim, CPA on 28 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1094Change RequestPASS87%✓ Accepted
by Sarah Kim, CPA on 13 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1094ApprovalPASS90%✓ Accepted
by Sarah Kim, CPA on 23 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1094Testing EvidencePASS93%✓ Accepted
by Sarah Kim, CPA on 26 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1094Implementation EvidencePASS96%✓ Accepted
by Sarah Kim, CPA on 6 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1095Change RequestPASS94%✓ Accepted
by Sarah Kim, CPA on 21 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1095ApprovalPASS97%✓ Accepted
by Sarah Kim, CPA on 24 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1095Testing EvidencePASS87%✓ Accepted
by Sarah Kim, CPA on 4 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1095Implementation EvidencePASS90%✓ Accepted
by Sarah Kim, CPA on 16 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1096Change RequestPASS88%✓ Accepted
by Sarah Kim, CPA on 29 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1096ApprovalPASS91%✓ Accepted
by Sarah Kim, CPA on 2 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1096Testing EvidencePASS94%✓ Accepted
by Sarah Kim, CPA on 14 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1096Implementation EvidencePASS97%✓ Accepted
by Sarah Kim, CPA on 17 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1097Change RequestPASS95%✓ Accepted
by Sarah Kim, CPA on 7 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1097ApprovalPASS98%✓ Accepted
by Sarah Kim, CPA on 12 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1097Testing EvidencePASS88%✓ Accepted
by Sarah Kim, CPA on 22 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1097Implementation EvidencePASS91%✓ Accepted
by Sarah Kim, CPA on 25 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1098Change RequestPASS89%✓ Accepted
by Sarah Kim, CPA on 10 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1098ApprovalPASS92%✓ Accepted
by Sarah Kim, CPA on 20 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1098Testing EvidencePASS95%✓ Accepted
by Sarah Kim, CPA on 30 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1098Implementation EvidencePASS98%✓ Accepted
by Sarah Kim, CPA on 3 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1099Change RequestPASS96%✓ Accepted
by Sarah Kim, CPA on 18 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1099ApprovalPASS99%✓ Accepted
by Sarah Kim, CPA on 28 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1099Testing EvidencePASS89%✓ Accepted
by Sarah Kim, CPA on 1 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1099Implementation EvidencePASS92%✓ Accepted
by Sarah Kim, CPA on 13 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1100Change RequestPASS90%✓ Accepted
by Sarah Kim, CPA on 26 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1100ApprovalPASS93%✓ Accepted
by Sarah Kim, CPA on 6 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1100Testing EvidencePASS96%✓ Accepted
by Sarah Kim, CPA on 11 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1100Implementation EvidencePASS99%✓ Accepted
by Sarah Kim, CPA on 21 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1101Change RequestPASS97%✓ Accepted
by Sarah Kim, CPA on 4 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1101ApprovalPASS87%✓ Accepted
by Sarah Kim, CPA on 16 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1101Testing EvidencePASS90%✓ Accepted
by Sarah Kim, CPA on 19 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1101Implementation EvidencePASS93%✓ Accepted
by Sarah Kim, CPA on 29 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1102Change RequestPASS91%✓ Accepted
by Sarah Kim, CPA on 14 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1102ApprovalPASS94%✓ Accepted
by Sarah Kim, CPA on 17 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1102Testing EvidencePASS97%✓ Accepted
by Sarah Kim, CPA on 27 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1102Implementation EvidencePASS87%✓ Accepted
by Sarah Kim, CPA on 7 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1103Change RequestPASS98%✓ Accepted
by Sarah Kim, CPA on 22 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1103ApprovalPASS88%✓ Accepted
by Sarah Kim, CPA on 25 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1103Testing EvidencePASS91%✓ Accepted
by Sarah Kim, CPA on 5 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1103Implementation EvidencePASS94%✓ Accepted
by Sarah Kim, CPA on 10 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1104Change RequestPASS92%✓ Accepted
by Sarah Kim, CPA on 30 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1104ApprovalPASS95%✓ Accepted
by Sarah Kim, CPA on 3 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1104Testing EvidencePASS98%✓ Accepted
by Sarah Kim, CPA on 15 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1104Implementation EvidencePASS88%✓ Accepted
by Sarah Kim, CPA on 18 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1105Change RequestPASS99%✓ Accepted
by Sarah Kim, CPA on 1 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1105ApprovalPASS89%✓ Accepted
by Sarah Kim, CPA on 13 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1105Testing EvidencePASS92%✓ Accepted
by Sarah Kim, CPA on 23 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1105Implementation EvidencePASS95%✓ Accepted
by Sarah Kim, CPA on 26 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1106Change RequestPASS93%✓ Accepted
by Sarah Kim, CPA on 11 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1106ApprovalPASS96%✓ Accepted
by Sarah Kim, CPA on 21 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1106Testing EvidencePASS99%✓ Accepted
by Sarah Kim, CPA on 24 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1106Implementation EvidencePASS89%✓ Accepted
by Sarah Kim, CPA on 4 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1107Change RequestPASS87%✓ Accepted
by Sarah Kim, CPA on 19 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1107ApprovalPASS90%✓ Accepted
by Sarah Kim, CPA on 29 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1107Testing EvidencePASS93%✓ Accepted
by Sarah Kim, CPA on 2 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1107Implementation EvidencePASS96%✓ Accepted
by Sarah Kim, CPA on 14 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1108Change RequestPASS94%✓ Accepted
by Sarah Kim, CPA on 27 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1108ApprovalPASS97%✓ Accepted
by Sarah Kim, CPA on 7 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1108Testing EvidencePASS87%✓ Accepted
by Sarah Kim, CPA on 12 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1108Implementation EvidencePASS90%✓ Accepted
by Sarah Kim, CPA on 22 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1109Change RequestPASS88%✓ Accepted
by Sarah Kim, CPA on 5 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1109ApprovalPASS91%✓ Accepted
by Sarah Kim, CPA on 10 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1109Testing EvidencePASS94%✓ Accepted
by Sarah Kim, CPA on 20 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1109Implementation EvidencePASS97%✓ Accepted
by Sarah Kim, CPA on 30 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1110Change RequestPASS95%✓ Accepted
by Sarah Kim, CPA on 15 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1110ApprovalPASS98%✓ Accepted
by Sarah Kim, CPA on 18 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1110Testing EvidencePASS88%✓ Accepted
by Sarah Kim, CPA on 28 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1110Implementation EvidencePASS91%✓ Accepted
by Sarah Kim, CPA on 1 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1111Change RequestPASS89%✓ Accepted
by Sarah Kim, CPA on 23 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1111ApprovalPASS92%✓ Accepted
by Sarah Kim, CPA on 26 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1111Testing EvidencePASS95%✓ Accepted
by Sarah Kim, CPA on 6 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1111Implementation EvidencePASS98%✓ Accepted
by Sarah Kim, CPA on 11 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1112Change RequestPASS96%✓ Accepted
by Sarah Kim, CPA on 24 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1112ApprovalPASS99%✓ Accepted
by Sarah Kim, CPA on 4 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1112Testing EvidencePASS89%✓ Accepted
by Sarah Kim, CPA on 16 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1112Implementation EvidencePASS92%✓ Accepted
by Sarah Kim, CPA on 19 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1113Change RequestPASS90%✓ Accepted
by Sarah Kim, CPA on 2 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1113ApprovalPASS93%✓ Accepted
by Sarah Kim, CPA on 14 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1113Testing EvidencePASS96%✓ Accepted
by Sarah Kim, CPA on 17 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1113Implementation EvidencePASS99%✓ Accepted
by Sarah Kim, CPA on 27 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1114Change RequestPASS97%✓ Accepted
by Sarah Kim, CPA on 12 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1114ApprovalPASS87%✓ Accepted
by Sarah Kim, CPA on 22 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1114Testing EvidencePASS90%✓ Accepted
by Sarah Kim, CPA on 25 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1114Implementation EvidencePASS93%✓ Accepted
by Sarah Kim, CPA on 5 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1115Change RequestPASS91%✓ Accepted
by Sarah Kim, CPA on 20 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1115ApprovalPASS94%✓ Accepted
by Sarah Kim, CPA on 30 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1115Testing EvidencePASS97%✓ Accepted
by Sarah Kim, CPA on 3 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1115Implementation EvidencePASS87%✓ Accepted
by Sarah Kim, CPA on 15 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1116Change RequestPASS98%✓ Accepted
by Sarah Kim, CPA on 28 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1116ApprovalPASS88%✓ Accepted
by Sarah Kim, CPA on 1 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1116Testing EvidencePASS91%✓ Accepted
by Sarah Kim, CPA on 13 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1116Implementation EvidencePASS94%✓ Accepted
by Sarah Kim, CPA on 23 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1117Change RequestPASS92%✓ Accepted
by Sarah Kim, CPA on 6 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1117ApprovalPASS95%✓ Accepted
by Sarah Kim, CPA on 11 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1117Testing EvidencePASS98%✓ Accepted
by Sarah Kim, CPA on 21 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1117Implementation EvidencePASS88%✓ Accepted
by Sarah Kim, CPA on 24 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1118Change RequestPASS99%✓ Accepted
by Sarah Kim, CPA on 16 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1118ApprovalPASS89%✓ Accepted
by Sarah Kim, CPA on 19 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1118Testing EvidencePASS92%✓ Accepted
by Sarah Kim, CPA on 29 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1118Implementation EvidencePASS95%✓ Accepted
by Sarah Kim, CPA on 2 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1119Change RequestPASS93%✓ Accepted
by Sarah Kim, CPA on 17 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1119ApprovalPASS96%✓ Accepted
by Sarah Kim, CPA on 27 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1119Testing EvidencePASS99%✓ Accepted
by Sarah Kim, CPA on 7 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1119Implementation EvidencePASS89%✓ Accepted
by Sarah Kim, CPA on 12 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1120Change RequestPASS87%✓ Accepted
by Sarah Kim, CPA on 25 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1120ApprovalPASS90%✓ Accepted
by Sarah Kim, CPA on 5 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1120Testing EvidencePASS93%✓ Accepted
by Sarah Kim, CPA on 10 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1120Implementation EvidencePASS81%↻ Overridden
by Sarah Kim, CPA on 20 Nov 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
CHG-2026-1121Change RequestPASS94%✓ Accepted
by Sarah Kim, CPA on 3 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1121ApprovalPASS97%✓ Accepted
by Sarah Kim, CPA on 15 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1121Testing EvidencePASS81%↻ Overridden
by Sarah Kim, CPA on 18 Nov 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
CHG-2026-1121Implementation EvidencePASS90%✓ Accepted
by Sarah Kim, CPA on 28 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1122Change RequestPASS88%✓ Accepted
by Sarah Kim, CPA on 13 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1122ApprovalPASS81%↻ Overridden
by Sarah Kim, CPA on 23 Nov 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
CHG-2026-1122Testing EvidencePASS94%✓ Accepted
by Sarah Kim, CPA on 26 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1122Implementation EvidencePASS97%✓ Accepted
by Sarah Kim, CPA on 6 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1123Change RequestPASS81%↻ Overridden
by Sarah Kim, CPA on 21 Nov 2026, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
CHG-2026-1123ApprovalPASS98%✓ Accepted
by Sarah Kim, CPA on 24 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1123Testing EvidencePASS88%✓ Accepted
by Sarah Kim, CPA on 4 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1123Implementation EvidencePASS91%✓ Accepted
by Sarah Kim, CPA on 16 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1124Change RequestPASS89%✓ Accepted
by Sarah Kim, CPA on 29 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1124ApprovalPASS92%✓ Accepted
by Sarah Kim, CPA on 2 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1124Testing EvidencePASS95%✓ Accepted
by Sarah Kim, CPA on 14 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1124Implementation EvidencePASS98%✓ Accepted
by Sarah Kim, CPA on 17 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1125Change RequestPASS96%✓ Accepted
by Sarah Kim, CPA on 7 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1125ApprovalPASS99%✓ Accepted
by Sarah Kim, CPA on 12 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1125Testing EvidencePASS89%✓ Accepted
by Sarah Kim, CPA on 22 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1125Implementation EvidencePASS92%✓ Accepted
by Sarah Kim, CPA on 25 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1126Change RequestPASS90%✓ Accepted
by Sarah Kim, CPA on 10 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1126ApprovalPASS93%✓ Accepted
by Sarah Kim, CPA on 20 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1126Testing EvidencePASS96%✓ Accepted
by Sarah Kim, CPA on 30 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1126Implementation EvidencePASS99%✓ Accepted
by Sarah Kim, CPA on 3 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1127Change RequestPASS97%✓ Accepted
by Sarah Kim, CPA on 18 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1127ApprovalPASS87%✓ Accepted
by Sarah Kim, CPA on 28 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1127Testing EvidencePASS90%✓ Accepted
by Sarah Kim, CPA on 1 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1127Implementation EvidencePASS93%✓ Accepted
by Sarah Kim, CPA on 13 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1128Change RequestPASS91%✓ Accepted
by Sarah Kim, CPA on 26 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1128ApprovalPASS94%✓ Accepted
by Sarah Kim, CPA on 6 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1128Testing EvidencePASS97%✓ Accepted
by Sarah Kim, CPA on 11 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1128Implementation EvidencePASS87%✓ Accepted
by Sarah Kim, CPA on 21 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1129Change RequestPASS98%✓ Accepted
by Sarah Kim, CPA on 4 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1129ApprovalPASS88%✓ Accepted
by Sarah Kim, CPA on 16 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1129Testing EvidencePASS91%✓ Accepted
by Sarah Kim, CPA on 19 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1129Implementation EvidencePASS94%✓ Accepted
by Sarah Kim, CPA on 29 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1130Change RequestPASS92%✓ Accepted
by Sarah Kim, CPA on 14 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1130ApprovalPASS95%✓ Accepted
by Sarah Kim, CPA on 17 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1130Testing EvidencePASS98%✓ Accepted
by Sarah Kim, CPA on 27 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1130Implementation EvidencePASS88%✓ Accepted
by Sarah Kim, CPA on 7 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1131Change RequestPASS99%✓ Accepted
by Sarah Kim, CPA on 22 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1131ApprovalPASS89%✓ Accepted
by Sarah Kim, CPA on 25 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1131Testing EvidencePASS92%✓ Accepted
by Sarah Kim, CPA on 5 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1131Implementation EvidencePASS95%✓ Accepted
by Sarah Kim, CPA on 10 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1132Change RequestPASS93%✓ Accepted
by Sarah Kim, CPA on 30 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1132ApprovalPASS96%✓ Accepted
by Sarah Kim, CPA on 3 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1132Testing EvidencePASS99%✓ Accepted
by Sarah Kim, CPA on 15 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1132Implementation EvidencePASS89%✓ Accepted
by Sarah Kim, CPA on 18 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1133Change RequestPASS87%✓ Accepted
by Sarah Kim, CPA on 1 Dec 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1133ApprovalPASS90%✓ Accepted
by Sarah Kim, CPA on 13 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1133Testing EvidencePASS93%✓ Accepted
by Sarah Kim, CPA on 23 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1133Implementation EvidencePASS96%✓ Accepted
by Sarah Kim, CPA on 26 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1134Change RequestPASS94%✓ Accepted
by Sarah Kim, CPA on 11 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1134ApprovalPASS97%✓ Accepted
by Sarah Kim, CPA on 21 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1134Testing EvidencePASS87%✓ Accepted
by Sarah Kim, CPA on 24 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1134Implementation EvidencePASS90%✓ Accepted
by Sarah Kim, CPA on 4 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1135Change RequestPASS88%✓ Accepted
by Sarah Kim, CPA on 19 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1135ApprovalPASS91%✓ Accepted
by Sarah Kim, CPA on 29 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1135Testing EvidencePASS94%✓ Accepted
by Sarah Kim, CPA on 2 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1135Implementation EvidencePASS97%✓ Accepted
by Sarah Kim, CPA on 14 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1136Change RequestPASS95%✓ Accepted
by Sarah Kim, CPA on 27 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1136ApprovalPASS98%✓ Accepted
by Sarah Kim, CPA on 7 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1136Testing EvidencePASS88%✓ Accepted
by Sarah Kim, CPA on 12 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1136Implementation EvidencePASS91%✓ Accepted
by Sarah Kim, CPA on 22 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1137Change RequestPASS89%✓ Accepted
by Sarah Kim, CPA on 5 Dec 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1137ApprovalPASS92%✓ Accepted
by Sarah Kim, CPA on 10 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1137Testing EvidencePASS95%✓ Accepted
by Sarah Kim, CPA on 20 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1137Implementation EvidencePASS98%✓ Accepted
by Sarah Kim, CPA on 30 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1138Change RequestPASS96%✓ Accepted
by Sarah Kim, CPA on 15 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
CHG-2026-1138ApprovalPASS99%✓ Accepted
by Sarah Kim, CPA on 18 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1138Testing EvidencePASS89%✓ Accepted
by Sarah Kim, CPA on 28 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1138Implementation EvidencePASS92%✓ Accepted
by Sarah Kim, CPA on 1 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1139Change RequestPASS90%✓ Accepted
by Sarah Kim, CPA on 23 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
CHG-2026-1139ApprovalPASS93%✓ Accepted
by Sarah Kim, CPA on 26 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1139Testing EvidencePASS96%✓ Accepted
by Sarah Kim, CPA on 6 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1139Implementation EvidencePASS99%✓ Accepted
by Sarah Kim, CPA on 11 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1140Change RequestPASS97%✓ Accepted
by Sarah Kim, CPA on 24 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
CHG-2026-1140ApprovalPASS87%✓ Accepted
by Sarah Kim, CPA on 4 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1140Testing EvidencePASS90%✓ Accepted
by Sarah Kim, CPA on 16 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1140Implementation EvidencePASS93%✓ Accepted
by Sarah Kim, CPA on 19 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1141Change RequestPASS91%✓ Accepted
by Sarah Kim, CPA on 2 Dec 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
CHG-2026-1141ApprovalPASS94%✓ Accepted
by Sarah Kim, CPA on 14 Nov 2026, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
CHG-2026-1141Testing EvidencePASS97%✓ Accepted
by Sarah Kim, CPA on 17 Nov 2026, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
CHG-2026-1141Implementation EvidencePASS87%✓ Accepted
by Sarah Kim, CPA on 27 Nov 2026, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001

Total: 400 AI test results

Note: All AI test results require auditor review before conclusions can be locked (Evidence-First methodology).
EXCEPTIONS (1):
Emergency-change carve-out invoked — pre-deployment CAB approval bypassed
Medium Accepted

Sample CHG-2026-1059 (Jira change ticket; Sev-1 emergency response): a Sev-1 payment-processing latency incident was detected by Datadog synthetic monitors on 14 August 2026 at 03:30 UTC. The on-call SRE invoked the Change Management Policy v4.1 §5.4 emergency-change carve-out and deployed remediation code (hotfix on the payment-gateway service) at 03:45 UTC — 15 minutes after detection — without pre-deployment CAB approval. The post-implementation review (PIR-2026-0815) was filed on 15 August 2026 at 04:12 UTC, within the 24-hour PIR SLA; ratification at the next scheduled CAB meeting on 21 August 2026 reviewed the deployment, the PIR findings, and the residual-risk assessment.

C3 Release Controls Locked
Effective
WP-Ref: WP-APXFG-2026-ITGC-C3 | System: GitHub Enterprise | Category: Change Management | Population: 142 | Samples: 58 | Signed off by: Sarah Kim, CPA on 5 Apr 2027

Verifies that software releases have proper approval and deployment gates.

CONCLUSION NARRATIVE:

We tested release controls covering the period 1 January 2026 through 31 December 2026 for Apex Financial Group's in-scope financial-reporting systems. The population comprises 142 production releases recorded in GitHub Enterprise; we selected 58 sample items using a random-selection method consistent with the firm's sample-size methodology guide §SAM-04 (15% tolerable deviation rate, 2% expected deviation rate, 10% risk of overreliance for MEDIUM-risk change controls). Sample selection drew proportionally across the four quarters of the audit period. Testing results: 58 of 58 sampled releases met both control attributes — release approval recorded (authorized approver per the Release Management Standard v2.5) and test sign-off documented prior to production deployment. Supporting trace verification examined release-notes-ref, version-tag, rollback-plan-ref, artifact-hash, and release-record nodes per the C3 traceability column set (see §8 — Traceability). The observed deviation rate is 0 of 58 (0.0%), which is below the 15% tolerable deviation rate established for this control's risk profile. No exceptions were identified during testing. AI-assisted testing produced pass results for all sampled attributes; warn-band findings were auditor-reviewed with documented override rationale (see §7 — AI Provenance). No deficiencies were identified that require classification under the AICPA AU-C 940 deficiency-evaluation framework. We conclude the control operated effectively during the period 1 January 2026 – 31 December 2026 in all material respects relevant to the entity's IT General Controls over financial reporting.

ATTRIBUTE-LEVEL TESTING RESULTS:
Sample Release Approval Test Sign-off Evidence
GH-RLS-v2.0.0 2 file(s)
GH-RLS-v2.1.0 2 file(s)
GH-RLS-v2.2.0 2 file(s)
GH-RLS-v2.3.0 2 file(s)
GH-RLS-v3.0.0 2 file(s)
GH-RLS-v3.1.0 2 file(s)
GH-RLS-v3.2.0 2 file(s)
GH-RLS-v3.3.0 2 file(s)
GH-RLS-v4.0.0 2 file(s)
GH-RLS-v4.1.0 2 file(s)
GH-RLS-v4.2.0 2 file(s)
GH-RLS-v4.3.0 2 file(s)
GH-RLS-v5.0.0 2 file(s)
GH-RLS-v5.1.0 2 file(s)
GH-RLS-v5.2.0 2 file(s)
GH-RLS-v5.3.0 2 file(s)
GH-RLS-v6.0.0 2 file(s)
GH-RLS-v6.1.0 2 file(s)
GH-RLS-v6.2.0 2 file(s)
GH-RLS-v6.3.0 2 file(s)
GH-RLS-v7.0.0 2 file(s)
GH-RLS-v7.1.0 2 file(s)
GH-RLS-v7.2.0 2 file(s)
GH-RLS-v7.3.0 2 file(s)
GH-RLS-v8.0.0 2 file(s)
GH-RLS-v8.1.0 2 file(s)
GH-RLS-v8.2.0 2 file(s)
GH-RLS-v8.3.0 2 file(s)
GH-RLS-v9.0.0 2 file(s)
GH-RLS-v9.1.0 2 file(s)
GH-RLS-v9.2.0 2 file(s)
GH-RLS-v9.3.0 2 file(s)
GH-RLS-v10.0.0 2 file(s)
GH-RLS-v10.1.0 2 file(s)
GH-RLS-v10.2.0 2 file(s)
GH-RLS-v10.3.0 2 file(s)
GH-RLS-v11.0.0 2 file(s)
GH-RLS-v11.1.0 2 file(s)
GH-RLS-v11.2.0 2 file(s)
GH-RLS-v11.3.0 2 file(s)
GH-RLS-v12.0.0 2 file(s)
GH-RLS-v12.1.0 2 file(s)
GH-RLS-v12.2.0 2 file(s)
GH-RLS-v12.3.0 2 file(s)
GH-RLS-v13.0.0 2 file(s)
GH-RLS-v13.1.0 2 file(s)
GH-RLS-v13.2.0 2 file(s)
GH-RLS-v13.3.0 2 file(s)
GH-RLS-v14.0.0 2 file(s)
GH-RLS-v14.1.0 2 file(s)
GH-RLS-v14.2.0 2 file(s)
GH-RLS-v14.3.0 2 file(s)
GH-RLS-v15.0.0 2 file(s)
GH-RLS-v15.1.0 2 file(s)
GH-RLS-v15.2.0 2 file(s)
GH-RLS-v15.3.0 2 file(s)
GH-RLS-v16.0.0 2 file(s)
GH-RLS-v16.1.0 2 file(s)

Total: 58 samples tested

Legend: ✓ Pass | ✗ Fail | ◐ Inconclusive | ⚠ Warn | ◌ Pending | – Not Tested
AI TESTING PROVENANCE (Evidence-First):
Total AI Results: 116
Samples Tested: 58
Accepted: 112
Overridden: 4
Avg Confidence: 92.5%
<70%: 0
≥90%: 85
Sample Attribute AI Result Confidence Auditor Rationale Model
GH-RLS-v2.0.0Release ApprovalPASS87%✓ Accepted
by Sarah Kim, CPA on 9 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
GH-RLS-v2.0.0Test Sign-offPASS90%✓ Accepted
by Sarah Kim, CPA on 19 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
GH-RLS-v2.1.0Release ApprovalPASS94%✓ Accepted
by Sarah Kim, CPA on 17 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
GH-RLS-v2.1.0Test Sign-offPASS97%✓ Accepted
by Sarah Kim, CPA on 13 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
GH-RLS-v2.2.0Release ApprovalPASS88%✓ Accepted
by Sarah Kim, CPA on 11 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
GH-RLS-v2.2.0Test Sign-offPASS91%✓ Accepted
by Sarah Kim, CPA on 21 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
GH-RLS-v2.3.0Release ApprovalPASS95%✓ Accepted
by Sarah Kim, CPA on 19 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
GH-RLS-v2.3.0Test Sign-offPASS98%✓ Accepted
by Sarah Kim, CPA on 15 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
GH-RLS-v3.0.0Release ApprovalPASS89%✓ Accepted
by Sarah Kim, CPA on 13 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
GH-RLS-v3.0.0Test Sign-offPASS92%✓ Accepted
by Sarah Kim, CPA on 16 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
GH-RLS-v3.1.0Release ApprovalPASS96%✓ Accepted
by Sarah Kim, CPA on 21 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
GH-RLS-v3.1.0Test Sign-offPASS99%✓ Accepted
by Sarah Kim, CPA on 10 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
GH-RLS-v3.2.0Release ApprovalPASS90%✓ Accepted
by Sarah Kim, CPA on 15 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
GH-RLS-v3.2.0Test Sign-offPASS93%✓ Accepted
by Sarah Kim, CPA on 18 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
GH-RLS-v3.3.0Release ApprovalPASS97%✓ Accepted
by Sarah Kim, CPA on 16 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
GH-RLS-v3.3.0Test Sign-offPASS87%✓ Accepted
by Sarah Kim, CPA on 12 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
GH-RLS-v4.0.0Release ApprovalPASS91%✓ Accepted
by Sarah Kim, CPA on 10 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
GH-RLS-v4.0.0Test Sign-offPASS94%✓ Accepted
by Sarah Kim, CPA on 20 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
GH-RLS-v4.1.0Release ApprovalPASS98%✓ Accepted
by Sarah Kim, CPA on 18 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
GH-RLS-v4.1.0Test Sign-offPASS88%✓ Accepted
by Sarah Kim, CPA on 14 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
GH-RLS-v4.2.0Release ApprovalPASS92%✓ Accepted
by Sarah Kim, CPA on 12 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
GH-RLS-v4.2.0Test Sign-offPASS83%↻ Overridden
by Sarah Kim, CPA on 22 Jan 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
GH-RLS-v4.3.0Release ApprovalPASS83%↻ Overridden
by Sarah Kim, CPA on 20 Jan 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
GH-RLS-v4.3.0Test Sign-offPASS89%✓ Accepted
by Sarah Kim, CPA on 9 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
GH-RLS-v5.0.0Release ApprovalPASS93%✓ Accepted
by Sarah Kim, CPA on 14 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
GH-RLS-v5.0.0Test Sign-offPASS96%✓ Accepted
by Sarah Kim, CPA on 17 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
GH-RLS-v5.1.0Release ApprovalPASS87%✓ Accepted
by Sarah Kim, CPA on 22 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
GH-RLS-v5.1.0Test Sign-offPASS90%✓ Accepted
by Sarah Kim, CPA on 11 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
GH-RLS-v5.2.0Release ApprovalPASS94%✓ Accepted
by Sarah Kim, CPA on 9 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
GH-RLS-v5.2.0Test Sign-offPASS97%✓ Accepted
by Sarah Kim, CPA on 19 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
GH-RLS-v5.3.0Release ApprovalPASS88%✓ Accepted
by Sarah Kim, CPA on 17 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
GH-RLS-v5.3.0Test Sign-offPASS91%✓ Accepted
by Sarah Kim, CPA on 13 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
GH-RLS-v6.0.0Release ApprovalPASS95%✓ Accepted
by Sarah Kim, CPA on 11 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
GH-RLS-v6.0.0Test Sign-offPASS98%✓ Accepted
by Sarah Kim, CPA on 21 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
GH-RLS-v6.1.0Release ApprovalPASS89%✓ Accepted
by Sarah Kim, CPA on 19 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
GH-RLS-v6.1.0Test Sign-offPASS92%✓ Accepted
by Sarah Kim, CPA on 15 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
GH-RLS-v6.2.0Release ApprovalPASS96%✓ Accepted
by Sarah Kim, CPA on 13 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
GH-RLS-v6.2.0Test Sign-offPASS99%✓ Accepted
by Sarah Kim, CPA on 16 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
GH-RLS-v6.3.0Release ApprovalPASS90%✓ Accepted
by Sarah Kim, CPA on 21 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
GH-RLS-v6.3.0Test Sign-offPASS93%✓ Accepted
by Sarah Kim, CPA on 10 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
GH-RLS-v7.0.0Release ApprovalPASS97%✓ Accepted
by Sarah Kim, CPA on 15 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
GH-RLS-v7.0.0Test Sign-offPASS87%✓ Accepted
by Sarah Kim, CPA on 18 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
GH-RLS-v7.1.0Release ApprovalPASS91%✓ Accepted
by Sarah Kim, CPA on 16 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
GH-RLS-v7.1.0Test Sign-offPASS94%✓ Accepted
by Sarah Kim, CPA on 12 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
GH-RLS-v7.2.0Release ApprovalPASS98%✓ Accepted
by Sarah Kim, CPA on 10 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
GH-RLS-v7.2.0Test Sign-offPASS88%✓ Accepted
by Sarah Kim, CPA on 20 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
GH-RLS-v7.3.0Release ApprovalPASS92%✓ Accepted
by Sarah Kim, CPA on 18 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
GH-RLS-v7.3.0Test Sign-offPASS95%✓ Accepted
by Sarah Kim, CPA on 14 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
GH-RLS-v8.0.0Release ApprovalPASS99%✓ Accepted
by Sarah Kim, CPA on 12 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
GH-RLS-v8.0.0Test Sign-offPASS89%✓ Accepted
by Sarah Kim, CPA on 22 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
GH-RLS-v8.1.0Release ApprovalPASS93%✓ Accepted
by Sarah Kim, CPA on 20 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
GH-RLS-v8.1.0Test Sign-offPASS96%✓ Accepted
by Sarah Kim, CPA on 9 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
GH-RLS-v8.2.0Release ApprovalPASS87%✓ Accepted
by Sarah Kim, CPA on 14 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
GH-RLS-v8.2.0Test Sign-offPASS90%✓ Accepted
by Sarah Kim, CPA on 17 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
GH-RLS-v8.3.0Release ApprovalPASS94%✓ Accepted
by Sarah Kim, CPA on 22 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
GH-RLS-v8.3.0Test Sign-offPASS97%✓ Accepted
by Sarah Kim, CPA on 11 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
GH-RLS-v9.0.0Release ApprovalPASS88%✓ Accepted
by Sarah Kim, CPA on 9 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
GH-RLS-v9.0.0Test Sign-offPASS91%✓ Accepted
by Sarah Kim, CPA on 19 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
GH-RLS-v9.1.0Release ApprovalPASS95%✓ Accepted
by Sarah Kim, CPA on 17 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
GH-RLS-v9.1.0Test Sign-offPASS98%✓ Accepted
by Sarah Kim, CPA on 13 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
GH-RLS-v9.2.0Release ApprovalPASS89%✓ Accepted
by Sarah Kim, CPA on 11 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
GH-RLS-v9.2.0Test Sign-offPASS92%✓ Accepted
by Sarah Kim, CPA on 21 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
GH-RLS-v9.3.0Release ApprovalPASS96%✓ Accepted
by Sarah Kim, CPA on 19 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
GH-RLS-v9.3.0Test Sign-offPASS99%✓ Accepted
by Sarah Kim, CPA on 15 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
GH-RLS-v10.0.0Release ApprovalPASS90%✓ Accepted
by Sarah Kim, CPA on 13 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
GH-RLS-v10.0.0Test Sign-offPASS93%✓ Accepted
by Sarah Kim, CPA on 16 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
GH-RLS-v10.1.0Release ApprovalPASS97%✓ Accepted
by Sarah Kim, CPA on 21 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
GH-RLS-v10.1.0Test Sign-offPASS87%✓ Accepted
by Sarah Kim, CPA on 10 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
GH-RLS-v10.2.0Release ApprovalPASS91%✓ Accepted
by Sarah Kim, CPA on 15 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
GH-RLS-v10.2.0Test Sign-offPASS94%✓ Accepted
by Sarah Kim, CPA on 18 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
GH-RLS-v10.3.0Release ApprovalPASS98%✓ Accepted
by Sarah Kim, CPA on 16 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
GH-RLS-v10.3.0Test Sign-offPASS88%✓ Accepted
by Sarah Kim, CPA on 12 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
GH-RLS-v11.0.0Release ApprovalPASS92%✓ Accepted
by Sarah Kim, CPA on 10 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
GH-RLS-v11.0.0Test Sign-offPASS95%✓ Accepted
by Sarah Kim, CPA on 20 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
GH-RLS-v11.1.0Release ApprovalPASS99%✓ Accepted
by Sarah Kim, CPA on 18 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
GH-RLS-v11.1.0Test Sign-offPASS89%✓ Accepted
by Sarah Kim, CPA on 14 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
GH-RLS-v11.2.0Release ApprovalPASS93%✓ Accepted
by Sarah Kim, CPA on 12 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
GH-RLS-v11.2.0Test Sign-offPASS96%✓ Accepted
by Sarah Kim, CPA on 22 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
GH-RLS-v11.3.0Release ApprovalPASS87%✓ Accepted
by Sarah Kim, CPA on 20 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
GH-RLS-v11.3.0Test Sign-offPASS90%✓ Accepted
by Sarah Kim, CPA on 9 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
GH-RLS-v12.0.0Release ApprovalPASS94%✓ Accepted
by Sarah Kim, CPA on 14 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
GH-RLS-v12.0.0Test Sign-offPASS97%✓ Accepted
by Sarah Kim, CPA on 17 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
GH-RLS-v12.1.0Release ApprovalPASS88%✓ Accepted
by Sarah Kim, CPA on 22 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
GH-RLS-v12.1.0Test Sign-offPASS91%✓ Accepted
by Sarah Kim, CPA on 11 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
GH-RLS-v12.2.0Release ApprovalPASS95%✓ Accepted
by Sarah Kim, CPA on 9 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
GH-RLS-v12.2.0Test Sign-offPASS98%✓ Accepted
by Sarah Kim, CPA on 19 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
GH-RLS-v12.3.0Release ApprovalPASS89%✓ Accepted
by Sarah Kim, CPA on 17 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
GH-RLS-v12.3.0Test Sign-offPASS92%✓ Accepted
by Sarah Kim, CPA on 13 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
GH-RLS-v13.0.0Release ApprovalPASS96%✓ Accepted
by Sarah Kim, CPA on 11 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
GH-RLS-v13.0.0Test Sign-offPASS99%✓ Accepted
by Sarah Kim, CPA on 21 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
GH-RLS-v13.1.0Release ApprovalPASS90%✓ Accepted
by Sarah Kim, CPA on 19 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
GH-RLS-v13.1.0Test Sign-offPASS82%↻ Overridden
by Sarah Kim, CPA on 15 Jan 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
GH-RLS-v13.2.0Release ApprovalPASS82%↻ Overridden
by Sarah Kim, CPA on 13 Jan 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
GH-RLS-v13.2.0Test Sign-offPASS87%✓ Accepted
by Sarah Kim, CPA on 16 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
GH-RLS-v13.3.0Release ApprovalPASS91%✓ Accepted
by Sarah Kim, CPA on 21 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
GH-RLS-v13.3.0Test Sign-offPASS94%✓ Accepted
by Sarah Kim, CPA on 10 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
GH-RLS-v14.0.0Release ApprovalPASS98%✓ Accepted
by Sarah Kim, CPA on 15 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
GH-RLS-v14.0.0Test Sign-offPASS88%✓ Accepted
by Sarah Kim, CPA on 18 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
GH-RLS-v14.1.0Release ApprovalPASS92%✓ Accepted
by Sarah Kim, CPA on 16 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
GH-RLS-v14.1.0Test Sign-offPASS95%✓ Accepted
by Sarah Kim, CPA on 12 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
GH-RLS-v14.2.0Release ApprovalPASS99%✓ Accepted
by Sarah Kim, CPA on 10 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
GH-RLS-v14.2.0Test Sign-offPASS89%✓ Accepted
by Sarah Kim, CPA on 20 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
GH-RLS-v14.3.0Release ApprovalPASS93%✓ Accepted
by Sarah Kim, CPA on 18 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
GH-RLS-v14.3.0Test Sign-offPASS96%✓ Accepted
by Sarah Kim, CPA on 14 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
GH-RLS-v15.0.0Release ApprovalPASS87%✓ Accepted
by Sarah Kim, CPA on 12 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001
GH-RLS-v15.0.0Test Sign-offPASS90%✓ Accepted
by Sarah Kim, CPA on 22 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
GH-RLS-v15.1.0Release ApprovalPASS94%✓ Accepted
by Sarah Kim, CPA on 20 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-sonnet-4-6
GH-RLS-v15.1.0Test Sign-offPASS97%✓ Accepted
by Sarah Kim, CPA on 9 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
GH-RLS-v15.2.0Release ApprovalPASS88%✓ Accepted
by Sarah Kim, CPA on 14 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-haiku-4-5-20251001
GH-RLS-v15.2.0Test Sign-offPASS91%✓ Accepted
by Sarah Kim, CPA on 17 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
GH-RLS-v15.3.0Release ApprovalPASS95%✓ Accepted
by Sarah Kim, CPA on 22 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-sonnet-4-6
GH-RLS-v15.3.0Test Sign-offPASS98%✓ Accepted
by Sarah Kim, CPA on 11 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
GH-RLS-v16.0.0Release ApprovalPASS89%✓ Accepted
by Sarah Kim, CPA on 9 Jan 2027, 10:00 UTC
Pre-deployment CAB approval recorded with attendee roster; deployment record matches approved scope; closure verification by control owner attested.claude-haiku-4-5-20251001
GH-RLS-v16.0.0Test Sign-offPASS92%✓ Accepted
by Sarah Kim, CPA on 19 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
GH-RLS-v16.1.0Release ApprovalPASS96%✓ Accepted
by Sarah Kim, CPA on 17 Jan 2027, 10:00 UTC
Change ticket lifecycle complete: ticket filed → CAB approval recorded → testing evidence attached → deployment record matched → closure verified. All five trace nodes pass.claude-sonnet-4-6
GH-RLS-v16.1.0Test Sign-offPASS99%✓ Accepted
by Sarah Kim, CPA on 13 Jan 2027, 10:00 UTC
Release tagged in GitHub with semantic version; release notes documented; rollback plan attached to release record. Standard change path observed.claude-haiku-4-5-20251001

Total: 116 AI test results

Note: All AI test results require auditor review before conclusions can be locked (Evidence-First methodology).
O1 Backup Success Monitoring Locked
Effective
WP-Ref: WP-APXFG-2026-ITGC-O1 | System: AWS Production Account | Category: IT Operations | Population: 365 | Samples: 100 | Signed off by: Sarah Kim, CPA on 25 Mar 2027

Verifies that backup jobs are monitored and failures are addressed.

CONCLUSION NARRATIVE:

We tested production-database backup controls covering the period 1 January 2026 through 31 December 2026 for Apex Financial Group's AWS production accounts. The population comprises 365 daily database-backup events recorded in AWS Backup and RDS Snapshots; we selected 100 sample items using a random-selection method consistent with the firm's sample-size methodology guide §SAM-04 (10% tolerable deviation rate, 2% expected deviation rate, 5% risk of overreliance for HIGH-risk operations controls). Sample selection drew proportionally across all twelve months of the audit period. Testing results: 100 of 100 sampled backup events met both control attributes — backup success (completion logged in AWS Backup within the daily 02:00 UTC window, with RDS snapshot integrity verification passing) and failure resolution (no failed backup remained unresolved; any failure investigated and re-run within the policy window). Additionally, the annual disaster-recovery drill conducted on 12 October 2026 successfully restored 100% of in-scope production databases from FY2026 backups within the 4-hour Recovery Time Objective documented in the Backup and Disaster Recovery Policy v3.0. The observed deviation rate is 0 of 100 (0.0%), which is below the 10% tolerable deviation rate established for this control's risk profile. No exceptions were identified during testing. AI-assisted testing produced pass results for all sampled attributes (see §7 — AI Provenance). No deficiencies were identified that require classification under the AICPA AU-C 940 deficiency-evaluation framework. We conclude the control operated effectively during the period 1 January 2026 – 31 December 2026 in all material respects relevant to the entity's IT General Controls over financial reporting.

ATTRIBUTE-LEVEL TESTING RESULTS:
Sample Backup Success Failure Resolution Evidence
RDS-SNAP-2026-0120 2 file(s)
RDS-SNAP-2026-0124 2 file(s)
RDS-SNAP-2026-0128 2 file(s)
RDS-SNAP-2026-0132 2 file(s)
RDS-SNAP-2026-0136 2 file(s)
RDS-SNAP-2026-0140 2 file(s)
RDS-SNAP-2026-0144 2 file(s)
RDS-SNAP-2026-0148 2 file(s)
RDS-SNAP-2026-0152 2 file(s)
RDS-SNAP-2026-0156 2 file(s)
RDS-SNAP-2026-0160 2 file(s)
RDS-SNAP-2026-0164 2 file(s)
RDS-SNAP-2026-0168 2 file(s)
RDS-SNAP-2026-0172 2 file(s)
RDS-SNAP-2026-0176 2 file(s)
RDS-SNAP-2026-0180 2 file(s)
RDS-SNAP-2026-0184 2 file(s)
RDS-SNAP-2026-0188 2 file(s)
RDS-SNAP-2026-0192 2 file(s)
RDS-SNAP-2026-0196 2 file(s)
RDS-SNAP-2026-0200 2 file(s)
RDS-SNAP-2026-0204 2 file(s)
RDS-SNAP-2026-0208 2 file(s)
RDS-SNAP-2026-0212 2 file(s)
RDS-SNAP-2026-0216 2 file(s)
RDS-SNAP-2026-0220 2 file(s)
RDS-SNAP-2026-0224 2 file(s)
RDS-SNAP-2026-0228 2 file(s)
RDS-SNAP-2026-0232 2 file(s)
RDS-SNAP-2026-0236 2 file(s)
RDS-SNAP-2026-0240 2 file(s)
RDS-SNAP-2026-0244 2 file(s)
RDS-SNAP-2026-0248 2 file(s)
RDS-SNAP-2026-0252 2 file(s)
RDS-SNAP-2026-0256 2 file(s)
RDS-SNAP-2026-0260 2 file(s)
RDS-SNAP-2026-0264 2 file(s)
RDS-SNAP-2026-0268 2 file(s)
RDS-SNAP-2026-0272 2 file(s)
RDS-SNAP-2026-0276 2 file(s)
RDS-SNAP-2026-0280 2 file(s)
RDS-SNAP-2026-0284 2 file(s)
RDS-SNAP-2026-0288 2 file(s)
RDS-SNAP-2026-0292 2 file(s)
RDS-SNAP-2026-0296 2 file(s)
RDS-SNAP-2026-0300 2 file(s)
RDS-SNAP-2026-0304 2 file(s)
RDS-SNAP-2026-0308 2 file(s)
RDS-SNAP-2026-0312 2 file(s)
RDS-SNAP-2026-0316 2 file(s)
RDS-SNAP-2026-0320 2 file(s)
RDS-SNAP-2026-0324 2 file(s)
RDS-SNAP-2026-0328 2 file(s)
RDS-SNAP-2026-0332 2 file(s)
RDS-SNAP-2026-0336 2 file(s)
RDS-SNAP-2026-0340 2 file(s)
RDS-SNAP-2026-0344 2 file(s)
RDS-SNAP-2026-0348 2 file(s)
RDS-SNAP-2026-0352 2 file(s)
RDS-SNAP-2026-0356 2 file(s)
RDS-SNAP-2026-0360 2 file(s)
RDS-SNAP-2026-0364 2 file(s)
RDS-SNAP-2026-0368 2 file(s)
RDS-SNAP-2026-0372 2 file(s)
RDS-SNAP-2026-0376 2 file(s)
RDS-SNAP-2026-0380 2 file(s)
RDS-SNAP-2026-0384 2 file(s)
RDS-SNAP-2026-0388 2 file(s)
RDS-SNAP-2026-0392 2 file(s)
RDS-SNAP-2026-0396 2 file(s)
RDS-SNAP-2026-0400 2 file(s)
RDS-SNAP-2026-0404 2 file(s)
RDS-SNAP-2026-0408 2 file(s)
RDS-SNAP-2026-0412 2 file(s)
RDS-SNAP-2026-0416 2 file(s)
RDS-SNAP-2026-0420 2 file(s)
RDS-SNAP-2026-0424 2 file(s)
RDS-SNAP-2026-0428 2 file(s)
RDS-SNAP-2026-0432 2 file(s)
RDS-SNAP-2026-0436 2 file(s)
RDS-SNAP-2026-0440 2 file(s)
RDS-SNAP-2026-0444 2 file(s)
RDS-SNAP-2026-0448 2 file(s)
RDS-SNAP-2026-0452 2 file(s)
RDS-SNAP-2026-0456 2 file(s)
RDS-SNAP-2026-0460 2 file(s)
RDS-SNAP-2026-0464 2 file(s)
RDS-SNAP-2026-0468 2 file(s)
RDS-SNAP-2026-0472 2 file(s)
RDS-SNAP-2026-0476 2 file(s)
RDS-SNAP-2026-0480 2 file(s)
RDS-SNAP-2026-0484 2 file(s)
RDS-SNAP-2026-0488 2 file(s)
RDS-SNAP-2026-0492 2 file(s)
RDS-SNAP-2026-0496 2 file(s)
RDS-SNAP-2026-0500 2 file(s)
RDS-SNAP-2026-0504 2 file(s)
RDS-SNAP-2026-0508 2 file(s)
RDS-SNAP-2026-0512 2 file(s)
RDS-SNAP-2026-0516 2 file(s)

Total: 100 samples tested

Legend: ✓ Pass | ✗ Fail | ◐ Inconclusive | ⚠ Warn | ◌ Pending | – Not Tested
AI TESTING PROVENANCE (Evidence-First):
Total AI Results: 200
Samples Tested: 100
Accepted: 194
Overridden: 6
Avg Confidence: 92.6%
<70%: 0
≥90%: 148
Sample Attribute AI Result Confidence Auditor Rationale Model
RDS-SNAP-2026-0120Backup SuccessPASS87%✓ Accepted
by Sarah Kim, CPA on 23 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0120Failure ResolutionPASS90%✓ Accepted
by Sarah Kim, CPA on 2 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0124Backup SuccessPASS94%✓ Accepted
by Sarah Kim, CPA on 31 Jan 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0124Failure ResolutionPASS97%✓ Accepted
by Sarah Kim, CPA on 10 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0128Backup SuccessPASS88%✓ Accepted
by Sarah Kim, CPA on 8 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0128Failure ResolutionPASS91%✓ Accepted
by Sarah Kim, CPA on 28 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0132Backup SuccessPASS95%✓ Accepted
by Sarah Kim, CPA on 26 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0132Failure ResolutionPASS98%✓ Accepted
by Sarah Kim, CPA on 5 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0136Backup SuccessPASS89%✓ Accepted
by Sarah Kim, CPA on 3 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0136Failure ResolutionPASS92%✓ Accepted
by Sarah Kim, CPA on 6 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0140Backup SuccessPASS96%✓ Accepted
by Sarah Kim, CPA on 11 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0140Failure ResolutionPASS99%✓ Accepted
by Sarah Kim, CPA on 24 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0144Backup SuccessPASS90%✓ Accepted
by Sarah Kim, CPA on 29 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0144Failure ResolutionPASS93%✓ Accepted
by Sarah Kim, CPA on 1 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0148Backup SuccessPASS97%✓ Accepted
by Sarah Kim, CPA on 30 Jan 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0148Failure ResolutionPASS87%✓ Accepted
by Sarah Kim, CPA on 9 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0152Backup SuccessPASS91%✓ Accepted
by Sarah Kim, CPA on 7 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0152Failure ResolutionPASS94%✓ Accepted
by Sarah Kim, CPA on 27 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0156Backup SuccessPASS98%✓ Accepted
by Sarah Kim, CPA on 25 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0156Failure ResolutionPASS88%✓ Accepted
by Sarah Kim, CPA on 4 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0160Backup SuccessPASS92%✓ Accepted
by Sarah Kim, CPA on 2 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0160Failure ResolutionPASS83%↻ Overridden
by Sarah Kim, CPA on 12 Feb 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
RDS-SNAP-2026-0164Backup SuccessPASS83%↻ Overridden
by Sarah Kim, CPA on 10 Feb 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
RDS-SNAP-2026-0164Failure ResolutionPASS89%✓ Accepted
by Sarah Kim, CPA on 23 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0168Backup SuccessPASS93%✓ Accepted
by Sarah Kim, CPA on 28 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0168Failure ResolutionPASS96%✓ Accepted
by Sarah Kim, CPA on 31 Jan 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0172Backup SuccessPASS87%✓ Accepted
by Sarah Kim, CPA on 5 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0172Failure ResolutionPASS90%✓ Accepted
by Sarah Kim, CPA on 8 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0176Backup SuccessPASS94%✓ Accepted
by Sarah Kim, CPA on 6 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0176Failure ResolutionPASS97%✓ Accepted
by Sarah Kim, CPA on 26 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0180Backup SuccessPASS88%✓ Accepted
by Sarah Kim, CPA on 24 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0180Failure ResolutionPASS91%✓ Accepted
by Sarah Kim, CPA on 3 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0184Backup SuccessPASS95%✓ Accepted
by Sarah Kim, CPA on 1 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0184Failure ResolutionPASS98%✓ Accepted
by Sarah Kim, CPA on 11 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0188Backup SuccessPASS89%✓ Accepted
by Sarah Kim, CPA on 9 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0188Failure ResolutionPASS92%✓ Accepted
by Sarah Kim, CPA on 29 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0192Backup SuccessPASS96%✓ Accepted
by Sarah Kim, CPA on 27 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0192Failure ResolutionPASS99%✓ Accepted
by Sarah Kim, CPA on 30 Jan 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0196Backup SuccessPASS90%✓ Accepted
by Sarah Kim, CPA on 4 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0196Failure ResolutionPASS93%✓ Accepted
by Sarah Kim, CPA on 7 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0200Backup SuccessPASS97%✓ Accepted
by Sarah Kim, CPA on 12 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0200Failure ResolutionPASS87%✓ Accepted
by Sarah Kim, CPA on 25 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0204Backup SuccessPASS91%✓ Accepted
by Sarah Kim, CPA on 23 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0204Failure ResolutionPASS94%✓ Accepted
by Sarah Kim, CPA on 2 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0208Backup SuccessPASS98%✓ Accepted
by Sarah Kim, CPA on 31 Jan 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0208Failure ResolutionPASS88%✓ Accepted
by Sarah Kim, CPA on 10 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0212Backup SuccessPASS92%✓ Accepted
by Sarah Kim, CPA on 8 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0212Failure ResolutionPASS95%✓ Accepted
by Sarah Kim, CPA on 28 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0216Backup SuccessPASS99%✓ Accepted
by Sarah Kim, CPA on 26 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0216Failure ResolutionPASS89%✓ Accepted
by Sarah Kim, CPA on 5 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0220Backup SuccessPASS93%✓ Accepted
by Sarah Kim, CPA on 3 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0220Failure ResolutionPASS96%✓ Accepted
by Sarah Kim, CPA on 6 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0224Backup SuccessPASS87%✓ Accepted
by Sarah Kim, CPA on 11 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0224Failure ResolutionPASS90%✓ Accepted
by Sarah Kim, CPA on 24 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0228Backup SuccessPASS94%✓ Accepted
by Sarah Kim, CPA on 29 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0228Failure ResolutionPASS97%✓ Accepted
by Sarah Kim, CPA on 1 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0232Backup SuccessPASS88%✓ Accepted
by Sarah Kim, CPA on 30 Jan 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0232Failure ResolutionPASS91%✓ Accepted
by Sarah Kim, CPA on 9 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0236Backup SuccessPASS95%✓ Accepted
by Sarah Kim, CPA on 7 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0236Failure ResolutionPASS98%✓ Accepted
by Sarah Kim, CPA on 27 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0240Backup SuccessPASS89%✓ Accepted
by Sarah Kim, CPA on 25 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0240Failure ResolutionPASS92%✓ Accepted
by Sarah Kim, CPA on 4 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0244Backup SuccessPASS96%✓ Accepted
by Sarah Kim, CPA on 2 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0244Failure ResolutionPASS99%✓ Accepted
by Sarah Kim, CPA on 12 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0248Backup SuccessPASS90%✓ Accepted
by Sarah Kim, CPA on 10 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0248Failure ResolutionPASS93%✓ Accepted
by Sarah Kim, CPA on 23 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0252Backup SuccessPASS97%✓ Accepted
by Sarah Kim, CPA on 28 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0252Failure ResolutionPASS87%✓ Accepted
by Sarah Kim, CPA on 31 Jan 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0256Backup SuccessPASS91%✓ Accepted
by Sarah Kim, CPA on 5 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0256Failure ResolutionPASS94%✓ Accepted
by Sarah Kim, CPA on 8 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0260Backup SuccessPASS98%✓ Accepted
by Sarah Kim, CPA on 6 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0260Failure ResolutionPASS88%✓ Accepted
by Sarah Kim, CPA on 26 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0264Backup SuccessPASS92%✓ Accepted
by Sarah Kim, CPA on 24 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0264Failure ResolutionPASS95%✓ Accepted
by Sarah Kim, CPA on 3 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0268Backup SuccessPASS99%✓ Accepted
by Sarah Kim, CPA on 1 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0268Failure ResolutionPASS89%✓ Accepted
by Sarah Kim, CPA on 11 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0272Backup SuccessPASS93%✓ Accepted
by Sarah Kim, CPA on 9 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0272Failure ResolutionPASS96%✓ Accepted
by Sarah Kim, CPA on 29 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0276Backup SuccessPASS87%✓ Accepted
by Sarah Kim, CPA on 27 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0276Failure ResolutionPASS90%✓ Accepted
by Sarah Kim, CPA on 30 Jan 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0280Backup SuccessPASS94%✓ Accepted
by Sarah Kim, CPA on 4 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0280Failure ResolutionPASS97%✓ Accepted
by Sarah Kim, CPA on 7 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0284Backup SuccessPASS88%✓ Accepted
by Sarah Kim, CPA on 12 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0284Failure ResolutionPASS91%✓ Accepted
by Sarah Kim, CPA on 25 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0288Backup SuccessPASS95%✓ Accepted
by Sarah Kim, CPA on 23 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0288Failure ResolutionPASS98%✓ Accepted
by Sarah Kim, CPA on 2 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0292Backup SuccessPASS89%✓ Accepted
by Sarah Kim, CPA on 31 Jan 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0292Failure ResolutionPASS92%✓ Accepted
by Sarah Kim, CPA on 10 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0296Backup SuccessPASS96%✓ Accepted
by Sarah Kim, CPA on 8 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0296Failure ResolutionPASS99%✓ Accepted
by Sarah Kim, CPA on 28 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0300Backup SuccessPASS90%✓ Accepted
by Sarah Kim, CPA on 26 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0300Failure ResolutionPASS82%↻ Overridden
by Sarah Kim, CPA on 5 Feb 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
RDS-SNAP-2026-0304Backup SuccessPASS82%↻ Overridden
by Sarah Kim, CPA on 3 Feb 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
RDS-SNAP-2026-0304Failure ResolutionPASS87%✓ Accepted
by Sarah Kim, CPA on 6 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0308Backup SuccessPASS91%✓ Accepted
by Sarah Kim, CPA on 11 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0308Failure ResolutionPASS94%✓ Accepted
by Sarah Kim, CPA on 24 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0312Backup SuccessPASS98%✓ Accepted
by Sarah Kim, CPA on 29 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0312Failure ResolutionPASS88%✓ Accepted
by Sarah Kim, CPA on 1 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0316Backup SuccessPASS92%✓ Accepted
by Sarah Kim, CPA on 30 Jan 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0316Failure ResolutionPASS95%✓ Accepted
by Sarah Kim, CPA on 9 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0320Backup SuccessPASS99%✓ Accepted
by Sarah Kim, CPA on 7 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0320Failure ResolutionPASS89%✓ Accepted
by Sarah Kim, CPA on 27 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0324Backup SuccessPASS93%✓ Accepted
by Sarah Kim, CPA on 25 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0324Failure ResolutionPASS96%✓ Accepted
by Sarah Kim, CPA on 4 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0328Backup SuccessPASS87%✓ Accepted
by Sarah Kim, CPA on 2 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0328Failure ResolutionPASS90%✓ Accepted
by Sarah Kim, CPA on 12 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0332Backup SuccessPASS94%✓ Accepted
by Sarah Kim, CPA on 10 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0332Failure ResolutionPASS97%✓ Accepted
by Sarah Kim, CPA on 23 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0336Backup SuccessPASS88%✓ Accepted
by Sarah Kim, CPA on 28 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0336Failure ResolutionPASS91%✓ Accepted
by Sarah Kim, CPA on 31 Jan 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0340Backup SuccessPASS95%✓ Accepted
by Sarah Kim, CPA on 5 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0340Failure ResolutionPASS98%✓ Accepted
by Sarah Kim, CPA on 8 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0344Backup SuccessPASS89%✓ Accepted
by Sarah Kim, CPA on 6 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0344Failure ResolutionPASS92%✓ Accepted
by Sarah Kim, CPA on 26 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0348Backup SuccessPASS96%✓ Accepted
by Sarah Kim, CPA on 24 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0348Failure ResolutionPASS99%✓ Accepted
by Sarah Kim, CPA on 3 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0352Backup SuccessPASS90%✓ Accepted
by Sarah Kim, CPA on 1 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0352Failure ResolutionPASS93%✓ Accepted
by Sarah Kim, CPA on 11 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0356Backup SuccessPASS97%✓ Accepted
by Sarah Kim, CPA on 9 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0356Failure ResolutionPASS87%✓ Accepted
by Sarah Kim, CPA on 29 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0360Backup SuccessPASS91%✓ Accepted
by Sarah Kim, CPA on 27 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0360Failure ResolutionPASS94%✓ Accepted
by Sarah Kim, CPA on 30 Jan 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0364Backup SuccessPASS98%✓ Accepted
by Sarah Kim, CPA on 4 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0364Failure ResolutionPASS88%✓ Accepted
by Sarah Kim, CPA on 7 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0368Backup SuccessPASS92%✓ Accepted
by Sarah Kim, CPA on 12 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0368Failure ResolutionPASS95%✓ Accepted
by Sarah Kim, CPA on 25 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0372Backup SuccessPASS99%✓ Accepted
by Sarah Kim, CPA on 23 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0372Failure ResolutionPASS89%✓ Accepted
by Sarah Kim, CPA on 2 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0376Backup SuccessPASS93%✓ Accepted
by Sarah Kim, CPA on 31 Jan 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0376Failure ResolutionPASS96%✓ Accepted
by Sarah Kim, CPA on 10 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0380Backup SuccessPASS87%✓ Accepted
by Sarah Kim, CPA on 8 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0380Failure ResolutionPASS90%✓ Accepted
by Sarah Kim, CPA on 28 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0384Backup SuccessPASS94%✓ Accepted
by Sarah Kim, CPA on 26 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0384Failure ResolutionPASS97%✓ Accepted
by Sarah Kim, CPA on 5 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0388Backup SuccessPASS88%✓ Accepted
by Sarah Kim, CPA on 3 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0388Failure ResolutionPASS91%✓ Accepted
by Sarah Kim, CPA on 6 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0392Backup SuccessPASS95%✓ Accepted
by Sarah Kim, CPA on 11 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0392Failure ResolutionPASS98%✓ Accepted
by Sarah Kim, CPA on 24 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0396Backup SuccessPASS89%✓ Accepted
by Sarah Kim, CPA on 29 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0396Failure ResolutionPASS92%✓ Accepted
by Sarah Kim, CPA on 1 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0400Backup SuccessPASS96%✓ Accepted
by Sarah Kim, CPA on 30 Jan 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0400Failure ResolutionPASS99%✓ Accepted
by Sarah Kim, CPA on 9 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0404Backup SuccessPASS90%✓ Accepted
by Sarah Kim, CPA on 7 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0404Failure ResolutionPASS93%✓ Accepted
by Sarah Kim, CPA on 27 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0408Backup SuccessPASS97%✓ Accepted
by Sarah Kim, CPA on 25 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0408Failure ResolutionPASS87%✓ Accepted
by Sarah Kim, CPA on 4 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0412Backup SuccessPASS91%✓ Accepted
by Sarah Kim, CPA on 2 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0412Failure ResolutionPASS94%✓ Accepted
by Sarah Kim, CPA on 12 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0416Backup SuccessPASS98%✓ Accepted
by Sarah Kim, CPA on 10 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0416Failure ResolutionPASS88%✓ Accepted
by Sarah Kim, CPA on 23 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0420Backup SuccessPASS92%✓ Accepted
by Sarah Kim, CPA on 28 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0420Failure ResolutionPASS95%✓ Accepted
by Sarah Kim, CPA on 31 Jan 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0424Backup SuccessPASS99%✓ Accepted
by Sarah Kim, CPA on 5 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0424Failure ResolutionPASS89%✓ Accepted
by Sarah Kim, CPA on 8 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0428Backup SuccessPASS93%✓ Accepted
by Sarah Kim, CPA on 6 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0428Failure ResolutionPASS96%✓ Accepted
by Sarah Kim, CPA on 26 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0432Backup SuccessPASS87%✓ Accepted
by Sarah Kim, CPA on 24 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0432Failure ResolutionPASS90%✓ Accepted
by Sarah Kim, CPA on 3 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0436Backup SuccessPASS94%✓ Accepted
by Sarah Kim, CPA on 1 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0436Failure ResolutionPASS97%✓ Accepted
by Sarah Kim, CPA on 11 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0440Backup SuccessPASS88%✓ Accepted
by Sarah Kim, CPA on 9 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0440Failure ResolutionPASS81%↻ Overridden
by Sarah Kim, CPA on 29 Jan 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
RDS-SNAP-2026-0444Backup SuccessPASS81%↻ Overridden
by Sarah Kim, CPA on 27 Jan 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
RDS-SNAP-2026-0444Failure ResolutionPASS98%✓ Accepted
by Sarah Kim, CPA on 30 Jan 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0448Backup SuccessPASS89%✓ Accepted
by Sarah Kim, CPA on 4 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0448Failure ResolutionPASS92%✓ Accepted
by Sarah Kim, CPA on 7 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0452Backup SuccessPASS96%✓ Accepted
by Sarah Kim, CPA on 12 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0452Failure ResolutionPASS99%✓ Accepted
by Sarah Kim, CPA on 25 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0456Backup SuccessPASS90%✓ Accepted
by Sarah Kim, CPA on 23 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0456Failure ResolutionPASS93%✓ Accepted
by Sarah Kim, CPA on 2 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0460Backup SuccessPASS97%✓ Accepted
by Sarah Kim, CPA on 31 Jan 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0460Failure ResolutionPASS87%✓ Accepted
by Sarah Kim, CPA on 10 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0464Backup SuccessPASS91%✓ Accepted
by Sarah Kim, CPA on 8 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0464Failure ResolutionPASS94%✓ Accepted
by Sarah Kim, CPA on 28 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0468Backup SuccessPASS98%✓ Accepted
by Sarah Kim, CPA on 26 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0468Failure ResolutionPASS88%✓ Accepted
by Sarah Kim, CPA on 5 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0472Backup SuccessPASS92%✓ Accepted
by Sarah Kim, CPA on 3 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0472Failure ResolutionPASS95%✓ Accepted
by Sarah Kim, CPA on 6 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0476Backup SuccessPASS99%✓ Accepted
by Sarah Kim, CPA on 11 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0476Failure ResolutionPASS89%✓ Accepted
by Sarah Kim, CPA on 24 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0480Backup SuccessPASS93%✓ Accepted
by Sarah Kim, CPA on 29 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0480Failure ResolutionPASS96%✓ Accepted
by Sarah Kim, CPA on 1 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0484Backup SuccessPASS87%✓ Accepted
by Sarah Kim, CPA on 30 Jan 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0484Failure ResolutionPASS90%✓ Accepted
by Sarah Kim, CPA on 9 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0488Backup SuccessPASS94%✓ Accepted
by Sarah Kim, CPA on 7 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0488Failure ResolutionPASS97%✓ Accepted
by Sarah Kim, CPA on 27 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0492Backup SuccessPASS88%✓ Accepted
by Sarah Kim, CPA on 25 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0492Failure ResolutionPASS91%✓ Accepted
by Sarah Kim, CPA on 4 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0496Backup SuccessPASS95%✓ Accepted
by Sarah Kim, CPA on 2 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
RDS-SNAP-2026-0496Failure ResolutionPASS98%✓ Accepted
by Sarah Kim, CPA on 12 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0500Backup SuccessPASS89%✓ Accepted
by Sarah Kim, CPA on 10 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
RDS-SNAP-2026-0500Failure ResolutionPASS92%✓ Accepted
by Sarah Kim, CPA on 23 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0504Backup SuccessPASS96%✓ Accepted
by Sarah Kim, CPA on 28 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
RDS-SNAP-2026-0504Failure ResolutionPASS99%✓ Accepted
by Sarah Kim, CPA on 31 Jan 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0508Backup SuccessPASS90%✓ Accepted
by Sarah Kim, CPA on 5 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
RDS-SNAP-2026-0508Failure ResolutionPASS93%✓ Accepted
by Sarah Kim, CPA on 8 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0512Backup SuccessPASS97%✓ Accepted
by Sarah Kim, CPA on 6 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
RDS-SNAP-2026-0512Failure ResolutionPASS87%✓ Accepted
by Sarah Kim, CPA on 26 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0516Backup SuccessPASS91%✓ Accepted
by Sarah Kim, CPA on 24 Jan 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
RDS-SNAP-2026-0516Failure ResolutionPASS94%✓ Accepted
by Sarah Kim, CPA on 3 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001

Total: 200 AI test results

Note: All AI test results require auditor review before conclusions can be locked (Evidence-First methodology).
O4 Monitoring & Alert Response Locked
Effective with Exceptions
WP-Ref: WP-APXFG-2026-ITGC-O4 | System: Datadog | Category: IT Operations | Population: 184 | Samples: 58 | Signed off by: Sarah Kim, CPA on 28 Mar 2027

Verifies that monitoring alerts are responded to appropriately.

CONCLUSION NARRATIVE:

We tested production-system monitoring controls covering the period 1 January 2026 through 31 December 2026 for Apex Financial Group's in-scope financial-reporting systems. The population comprises 184 production incidents recorded in Datadog and PagerDuty during FY2026; we selected 58 sample items using a random-selection method consistent with the firm's sample-size methodology guide §SAM-04 (15% tolerable deviation rate, 4% expected deviation rate, 10% risk of overreliance for MEDIUM-risk operations controls). The slightly elevated 4% expected deviation rate reflects the firm's prior-period monitoring-control risk assessment. Testing results: 57 of 58 sampled incidents met both control attributes — timely response (alert fired within the 5-minute SLA from threshold breach to PagerDuty notification) and resolution (incident acknowledged by on-call within the escalation tier and worked to closure). One sample (INC-2026-0922, a Sev-3 latency spike on 18 September 2026) failed the Timely Response attribute: alerting was delayed by 18 minutes from threshold breach due to a misconfigured aggregation window introduced in the Q3 2026 monitoring-rule refactor. The observed deviation rate is 1 of 58 (1.72%), which is below the 15% tolerable deviation rate established for this control's risk profile. Exception analysis: the alert-latency defect persisted from the Q3 2026 monitoring-rule refactor deployed on 15 July 2026 through the remediation PR #4521 deployed on 5 October 2026 — a period-of-deficiency of approximately 82 days during which alert-latency for the affected aggregation-window class of monitoring rules was reduced. Per the AICPA AU-C 940 deficiency-evaluation framework, we classify this as a Control Deficiency (not a Significant Deficiency or Material Weakness) on three grounds: (a) the defect affected only the Sev-3 alert class; Sev-1 and Sev-2 alerting paths were tested and were not impacted; (b) a compensating control — Datadog dashboard human-monitoring by the on-call SRE — provided coverage during the deficiency period; (c) remediation completed mid-period with a synthetic alert-latency test suite added to the CI pipeline preventing recurrence, and we verified the post-remediation behavior on 14 of 14 incidents in the October-December sub-period. We conclude the control operated effectively during the period 1 January 2026 – 31 December 2026 in all material respects relevant to the entity's IT General Controls over financial reporting, with the period-of-deficiency documented above remediated within the audit period.

ATTRIBUTE-LEVEL TESTING RESULTS:
Sample Timely Response Resolution Evidence
INC-2026-0823 2 file(s)
INC-2026-0834 2 file(s)
INC-2026-0845 2 file(s)
INC-2026-0856 2 file(s)
INC-2026-0867 2 file(s)
INC-2026-0878 2 file(s)
INC-2026-0889 2 file(s)
INC-2026-0900 2 file(s)
INC-2026-0911 2 file(s)
INC-2026-0922 2 file(s)
INC-2026-0933 2 file(s)
INC-2026-0944 2 file(s)
INC-2026-0955 2 file(s)
INC-2026-0966 2 file(s)
INC-2026-0977 2 file(s)
INC-2026-0988 2 file(s)
INC-2026-0999 2 file(s)
INC-2026-1010 2 file(s)
INC-2026-1021 2 file(s)
INC-2026-1032 2 file(s)
INC-2026-1043 2 file(s)
INC-2026-1054 2 file(s)
INC-2026-1065 2 file(s)
INC-2026-1076 2 file(s)
INC-2026-1087 2 file(s)
INC-2026-1098 2 file(s)
INC-2026-1109 2 file(s)
INC-2026-1120 2 file(s)
INC-2026-1131 2 file(s)
INC-2026-1142 2 file(s)
INC-2026-1153 2 file(s)
INC-2026-1164 2 file(s)
INC-2026-1175 2 file(s)
INC-2026-1186 2 file(s)
INC-2026-1197 2 file(s)
INC-2026-1208 2 file(s)
INC-2026-1219 2 file(s)
INC-2026-1230 2 file(s)
INC-2026-1241 2 file(s)
INC-2026-1252 2 file(s)
INC-2026-1263 2 file(s)
INC-2026-1274 2 file(s)
INC-2026-1285 2 file(s)
INC-2026-1296 2 file(s)
INC-2026-1307 2 file(s)
INC-2026-1318 2 file(s)
INC-2026-1329 2 file(s)
INC-2026-1340 2 file(s)
INC-2026-1351 2 file(s)
INC-2026-1362 2 file(s)
INC-2026-1373 2 file(s)
INC-2026-1384 2 file(s)
INC-2026-1395 2 file(s)
INC-2026-1406 2 file(s)
INC-2026-1417 2 file(s)
INC-2026-1428 2 file(s)
INC-2026-1439 2 file(s)
INC-2026-1450 2 file(s)

Total: 58 samples tested

Legend: ✓ Pass | ✗ Fail | ◐ Inconclusive | ⚠ Warn | ◌ Pending | – Not Tested
AI TESTING PROVENANCE (Evidence-First):
Total AI Results: 116
Samples Tested: 58
Accepted: 112 (1 exceptions)
Overridden: 4
Avg Confidence: 92.5%
<70%: 0
≥90%: 85
Sample Attribute AI Result Confidence Auditor Rationale Model
INC-2026-0823Timely ResponsePASS87%✓ Accepted
by Sarah Kim, CPA on 13 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
INC-2026-0823ResolutionPASS90%✓ Accepted
by Sarah Kim, CPA on 23 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
INC-2026-0834Timely ResponsePASS94%✓ Accepted
by Sarah Kim, CPA on 21 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
INC-2026-0834ResolutionPASS97%✓ Accepted
by Sarah Kim, CPA on 3 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
INC-2026-0845Timely ResponsePASS88%✓ Accepted
by Sarah Kim, CPA on 1 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
INC-2026-0845ResolutionPASS91%✓ Accepted
by Sarah Kim, CPA on 18 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
INC-2026-0856Timely ResponsePASS95%✓ Accepted
by Sarah Kim, CPA on 16 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
INC-2026-0856ResolutionPASS98%✓ Accepted
by Sarah Kim, CPA on 26 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
INC-2026-0867Timely ResponsePASS89%✓ Accepted
by Sarah Kim, CPA on 24 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
INC-2026-0867ResolutionPASS92%✓ Accepted
by Sarah Kim, CPA on 27 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
INC-2026-0878Timely ResponsePASS96%✓ Accepted
by Sarah Kim, CPA on 4 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
INC-2026-0878ResolutionPASS99%✓ Accepted
by Sarah Kim, CPA on 14 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
INC-2026-0889Timely ResponsePASS90%✓ Accepted
by Sarah Kim, CPA on 19 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
INC-2026-0889ResolutionPASS93%✓ Accepted
by Sarah Kim, CPA on 22 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
INC-2026-0900Timely ResponsePASS97%✓ Accepted
by Sarah Kim, CPA on 20 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
INC-2026-0900ResolutionPASS87%✓ Accepted
by Sarah Kim, CPA on 2 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
INC-2026-0911Timely ResponsePASS91%✓ Accepted
by Sarah Kim, CPA on 28 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
INC-2026-0911ResolutionPASS94%✓ Accepted
by Sarah Kim, CPA on 17 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
INC-2026-0922Timely ResponseFAIL92%✓ Accepted (Exception)
by Sarah Kim, CPA on 15 Feb 2027, 10:00 UTC
Monitoring alert fired 18 minutes after threshold breach (3.6× SLA); aggregation-window misconfiguration introduced in Q3 monitoring-rule refactor.claude-sonnet-4-6
INC-2026-0922ResolutionPASS88%✓ Accepted
by Sarah Kim, CPA on 25 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
INC-2026-0933Timely ResponsePASS92%✓ Accepted
by Sarah Kim, CPA on 23 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
INC-2026-0933ResolutionPASS83%↻ Overridden
by Sarah Kim, CPA on 5 Mar 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
INC-2026-0944Timely ResponsePASS83%↻ Overridden
by Sarah Kim, CPA on 3 Mar 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
INC-2026-0944ResolutionPASS89%✓ Accepted
by Sarah Kim, CPA on 13 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
INC-2026-0955Timely ResponsePASS93%✓ Accepted
by Sarah Kim, CPA on 18 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
INC-2026-0955ResolutionPASS96%✓ Accepted
by Sarah Kim, CPA on 21 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
INC-2026-0966Timely ResponsePASS87%✓ Accepted
by Sarah Kim, CPA on 26 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
INC-2026-0966ResolutionPASS90%✓ Accepted
by Sarah Kim, CPA on 1 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
INC-2026-0977Timely ResponsePASS94%✓ Accepted
by Sarah Kim, CPA on 27 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
INC-2026-0977ResolutionPASS97%✓ Accepted
by Sarah Kim, CPA on 16 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
INC-2026-0988Timely ResponsePASS88%✓ Accepted
by Sarah Kim, CPA on 14 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
INC-2026-0988ResolutionPASS91%✓ Accepted
by Sarah Kim, CPA on 24 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
INC-2026-0999Timely ResponsePASS95%✓ Accepted
by Sarah Kim, CPA on 22 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
INC-2026-0999ResolutionPASS98%✓ Accepted
by Sarah Kim, CPA on 4 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
INC-2026-1010Timely ResponsePASS89%✓ Accepted
by Sarah Kim, CPA on 2 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
INC-2026-1010ResolutionPASS92%✓ Accepted
by Sarah Kim, CPA on 19 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
INC-2026-1021Timely ResponsePASS96%✓ Accepted
by Sarah Kim, CPA on 17 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
INC-2026-1021ResolutionPASS99%✓ Accepted
by Sarah Kim, CPA on 20 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
INC-2026-1032Timely ResponsePASS90%✓ Accepted
by Sarah Kim, CPA on 25 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
INC-2026-1032ResolutionPASS93%✓ Accepted
by Sarah Kim, CPA on 28 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
INC-2026-1043Timely ResponsePASS97%✓ Accepted
by Sarah Kim, CPA on 5 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
INC-2026-1043ResolutionPASS87%✓ Accepted
by Sarah Kim, CPA on 15 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
INC-2026-1054Timely ResponsePASS91%✓ Accepted
by Sarah Kim, CPA on 13 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
INC-2026-1054ResolutionPASS94%✓ Accepted
by Sarah Kim, CPA on 23 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
INC-2026-1065Timely ResponsePASS98%✓ Accepted
by Sarah Kim, CPA on 21 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
INC-2026-1065ResolutionPASS88%✓ Accepted
by Sarah Kim, CPA on 3 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
INC-2026-1076Timely ResponsePASS92%✓ Accepted
by Sarah Kim, CPA on 1 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
INC-2026-1076ResolutionPASS95%✓ Accepted
by Sarah Kim, CPA on 18 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
INC-2026-1087Timely ResponsePASS99%✓ Accepted
by Sarah Kim, CPA on 16 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
INC-2026-1087ResolutionPASS89%✓ Accepted
by Sarah Kim, CPA on 26 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
INC-2026-1098Timely ResponsePASS93%✓ Accepted
by Sarah Kim, CPA on 24 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
INC-2026-1098ResolutionPASS96%✓ Accepted
by Sarah Kim, CPA on 27 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
INC-2026-1109Timely ResponsePASS87%✓ Accepted
by Sarah Kim, CPA on 4 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
INC-2026-1109ResolutionPASS90%✓ Accepted
by Sarah Kim, CPA on 14 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
INC-2026-1120Timely ResponsePASS94%✓ Accepted
by Sarah Kim, CPA on 19 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
INC-2026-1120ResolutionPASS97%✓ Accepted
by Sarah Kim, CPA on 22 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
INC-2026-1131Timely ResponsePASS88%✓ Accepted
by Sarah Kim, CPA on 20 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
INC-2026-1131ResolutionPASS91%✓ Accepted
by Sarah Kim, CPA on 2 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
INC-2026-1142Timely ResponsePASS95%✓ Accepted
by Sarah Kim, CPA on 28 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
INC-2026-1142ResolutionPASS98%✓ Accepted
by Sarah Kim, CPA on 17 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
INC-2026-1153Timely ResponsePASS89%✓ Accepted
by Sarah Kim, CPA on 15 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
INC-2026-1153ResolutionPASS92%✓ Accepted
by Sarah Kim, CPA on 25 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
INC-2026-1164Timely ResponsePASS96%✓ Accepted
by Sarah Kim, CPA on 23 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
INC-2026-1164ResolutionPASS99%✓ Accepted
by Sarah Kim, CPA on 5 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
INC-2026-1175Timely ResponsePASS90%✓ Accepted
by Sarah Kim, CPA on 3 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
INC-2026-1175ResolutionPASS93%✓ Accepted
by Sarah Kim, CPA on 13 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
INC-2026-1186Timely ResponsePASS97%✓ Accepted
by Sarah Kim, CPA on 18 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
INC-2026-1186ResolutionPASS87%✓ Accepted
by Sarah Kim, CPA on 21 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
INC-2026-1197Timely ResponsePASS91%✓ Accepted
by Sarah Kim, CPA on 26 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
INC-2026-1197ResolutionPASS94%✓ Accepted
by Sarah Kim, CPA on 1 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
INC-2026-1208Timely ResponsePASS98%✓ Accepted
by Sarah Kim, CPA on 27 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
INC-2026-1208ResolutionPASS88%✓ Accepted
by Sarah Kim, CPA on 16 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
INC-2026-1219Timely ResponsePASS92%✓ Accepted
by Sarah Kim, CPA on 14 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
INC-2026-1219ResolutionPASS95%✓ Accepted
by Sarah Kim, CPA on 24 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
INC-2026-1230Timely ResponsePASS99%✓ Accepted
by Sarah Kim, CPA on 22 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
INC-2026-1230ResolutionPASS89%✓ Accepted
by Sarah Kim, CPA on 4 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
INC-2026-1241Timely ResponsePASS93%✓ Accepted
by Sarah Kim, CPA on 2 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
INC-2026-1241ResolutionPASS96%✓ Accepted
by Sarah Kim, CPA on 19 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
INC-2026-1252Timely ResponsePASS87%✓ Accepted
by Sarah Kim, CPA on 17 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
INC-2026-1252ResolutionPASS90%✓ Accepted
by Sarah Kim, CPA on 20 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
INC-2026-1263Timely ResponsePASS94%✓ Accepted
by Sarah Kim, CPA on 25 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
INC-2026-1263ResolutionPASS97%✓ Accepted
by Sarah Kim, CPA on 28 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
INC-2026-1274Timely ResponsePASS88%✓ Accepted
by Sarah Kim, CPA on 5 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
INC-2026-1274ResolutionPASS91%✓ Accepted
by Sarah Kim, CPA on 15 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
INC-2026-1285Timely ResponsePASS95%✓ Accepted
by Sarah Kim, CPA on 13 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
INC-2026-1285ResolutionPASS98%✓ Accepted
by Sarah Kim, CPA on 23 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
INC-2026-1296Timely ResponsePASS89%✓ Accepted
by Sarah Kim, CPA on 21 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
INC-2026-1296ResolutionPASS92%✓ Accepted
by Sarah Kim, CPA on 3 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
INC-2026-1307Timely ResponsePASS96%✓ Accepted
by Sarah Kim, CPA on 1 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
INC-2026-1307ResolutionPASS99%✓ Accepted
by Sarah Kim, CPA on 18 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
INC-2026-1318Timely ResponsePASS90%✓ Accepted
by Sarah Kim, CPA on 16 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
INC-2026-1318ResolutionPASS82%↻ Overridden
by Sarah Kim, CPA on 26 Feb 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
INC-2026-1329Timely ResponsePASS82%↻ Overridden
by Sarah Kim, CPA on 24 Feb 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
INC-2026-1329ResolutionPASS87%✓ Accepted
by Sarah Kim, CPA on 27 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
INC-2026-1340Timely ResponsePASS91%✓ Accepted
by Sarah Kim, CPA on 4 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
INC-2026-1340ResolutionPASS94%✓ Accepted
by Sarah Kim, CPA on 14 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
INC-2026-1351Timely ResponsePASS98%✓ Accepted
by Sarah Kim, CPA on 19 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
INC-2026-1351ResolutionPASS88%✓ Accepted
by Sarah Kim, CPA on 22 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
INC-2026-1362Timely ResponsePASS92%✓ Accepted
by Sarah Kim, CPA on 20 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
INC-2026-1362ResolutionPASS95%✓ Accepted
by Sarah Kim, CPA on 2 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
INC-2026-1373Timely ResponsePASS99%✓ Accepted
by Sarah Kim, CPA on 28 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
INC-2026-1373ResolutionPASS89%✓ Accepted
by Sarah Kim, CPA on 17 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
INC-2026-1384Timely ResponsePASS93%✓ Accepted
by Sarah Kim, CPA on 15 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
INC-2026-1384ResolutionPASS96%✓ Accepted
by Sarah Kim, CPA on 25 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
INC-2026-1395Timely ResponsePASS87%✓ Accepted
by Sarah Kim, CPA on 23 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001
INC-2026-1395ResolutionPASS90%✓ Accepted
by Sarah Kim, CPA on 5 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
INC-2026-1406Timely ResponsePASS94%✓ Accepted
by Sarah Kim, CPA on 3 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-sonnet-4-6
INC-2026-1406ResolutionPASS97%✓ Accepted
by Sarah Kim, CPA on 13 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
INC-2026-1417Timely ResponsePASS88%✓ Accepted
by Sarah Kim, CPA on 18 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-haiku-4-5-20251001
INC-2026-1417ResolutionPASS91%✓ Accepted
by Sarah Kim, CPA on 21 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
INC-2026-1428Timely ResponsePASS95%✓ Accepted
by Sarah Kim, CPA on 26 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-sonnet-4-6
INC-2026-1428ResolutionPASS98%✓ Accepted
by Sarah Kim, CPA on 1 Mar 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
INC-2026-1439Timely ResponsePASS89%✓ Accepted
by Sarah Kim, CPA on 27 Feb 2027, 10:00 UTC
DR drill restore test (Oct 2026) restored production database from backup within 4-hour RTO; restore validation passed.claude-haiku-4-5-20251001
INC-2026-1439ResolutionPASS92%✓ Accepted
by Sarah Kim, CPA on 16 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
INC-2026-1450Timely ResponsePASS96%✓ Accepted
by Sarah Kim, CPA on 14 Feb 2027, 10:00 UTC
Backup completion confirmed in AWS Backup logs; integrity check (RDS snapshot validation) passed within the daily 02:00 UTC window.claude-sonnet-4-6
INC-2026-1450ResolutionPASS99%✓ Accepted
by Sarah Kim, CPA on 24 Feb 2027, 10:00 UTC
Monitoring alert fired within the 5-minute SLA window from threshold breach to PagerDuty notification; incident acknowledged by on-call engineer within escalation tier.claude-haiku-4-5-20251001

Total: 116 AI test results

Note: All AI test results require auditor review before conclusions can be locked (Evidence-First methodology).
EXCEPTIONS (1):
Alert-latency deficiency — Q3 monitoring refactor through Oct 5 remediation (~82 days)
Medium Remediated

Sample INC-2026-0922 (PagerDuty incident; Sev-3 latency spike): a Sev-3 latency spike on 18 September 2026 surfaced the alert-latency defect — the Datadog monitor fired 18 minutes after threshold breach versus the 5-minute SLA documented in the Service Monitoring Standard v2.3. Root-cause analysis traced the regression to an aggregation-window change introduced in the Q3 2026 monitoring-rule refactor deployed on 15 July 2026. Period-of-deficiency: from 2026-07-15 deploy through 2026-10-05 remediation deploy = approximately 82 days during which the affected aggregation-window class of monitoring rules had reduced alert latency.

S3 Vulnerability Management Locked
Effective
WP-Ref: WP-APXFG-2026-ITGC-S3 | System: Wiz Cloud Security | Category: Information Security | Population: 92 | Samples: 90 | Signed off by: Sarah Kim, CPA on 30 Mar 2027

Verifies that security vulnerabilities are identified through scanning and remediated in a timely manner.

CONCLUSION NARRATIVE:

We tested vulnerability-management controls covering the period 1 January 2026 through 31 December 2026 for Apex Financial Group's in-scope financial-reporting systems. The population comprises 92 high-severity and critical-severity vulnerabilities recorded in Wiz and Snyk during FY2026; we selected 90 sample items using a random-selection method consistent with the firm's sample-size methodology guide §SAM-04 (10% tolerable deviation rate, 3% expected deviation rate, 5% risk of overreliance for HIGH-risk security controls). The 3% expected deviation rate reflects the firm's prior-period assessment of remediation-SLA compliance risk. Testing results: 90 of 90 sampled vulnerabilities met all four control attributes — scanning coverage (asset in scope of authenticated Wiz/Snyk scanning), timely remediation (closed within the applicable SLA per the Vulnerability Management Policy v2.1 — high-severity: 30 days; critical-severity: 7 days, following severity triage within 24 hours of detection), exception management (any accepted-risk deferral formally approved and tracked), and validation scanning (re-scan confirming closure). Root-cause analyses were documented in the Wiz remediation tracker and closure was verified by Security Engineering for every sampled vulnerability. The observed deviation rate is 0 of 90 (0.0%), which is below the 10% tolerable deviation rate established for this control's risk profile. No exceptions were identified during testing. AI-assisted testing produced pass results for all sampled attributes (see §7 — AI Provenance); warn-band findings were auditor-reviewed with documented override rationale. No deficiencies were identified that require classification under the AICPA AU-C 940 deficiency-evaluation framework. We conclude the control operated effectively during the period 1 January 2026 – 31 December 2026 in all material respects relevant to the entity's IT General Controls over financial reporting.

ATTRIBUTE-LEVEL TESTING RESULTS:
Sample Scanning Coverage Timely Remediation Exception Management Validation Scanning Evidence
WIZ-VULN-2026000 4 file(s)
WIZ-VULN-2026017 4 file(s)
WIZ-VULN-2026034 4 file(s)
WIZ-VULN-2026051 4 file(s)
WIZ-VULN-2026068 4 file(s)
WIZ-VULN-2026085 4 file(s)
WIZ-VULN-2026102 4 file(s)
WIZ-VULN-2026119 4 file(s)
WIZ-VULN-2026136 4 file(s)
WIZ-VULN-2026153 4 file(s)
WIZ-VULN-2026170 4 file(s)
WIZ-VULN-2026187 4 file(s)
WIZ-VULN-2026204 4 file(s)
WIZ-VULN-2026221 4 file(s)
WIZ-VULN-2026238 4 file(s)
WIZ-VULN-2026255 4 file(s)
WIZ-VULN-2026272 4 file(s)
WIZ-VULN-2026289 4 file(s)
WIZ-VULN-2026306 4 file(s)
WIZ-VULN-2026323 4 file(s)
WIZ-VULN-2026340 4 file(s)
WIZ-VULN-2026357 4 file(s)
WIZ-VULN-2026374 4 file(s)
WIZ-VULN-2026391 4 file(s)
WIZ-VULN-2026408 4 file(s)
WIZ-VULN-2026425 4 file(s)
WIZ-VULN-2026442 4 file(s)
WIZ-VULN-2026459 4 file(s)
WIZ-VULN-2026476 4 file(s)
WIZ-VULN-2026493 4 file(s)
WIZ-VULN-2026510 4 file(s)
WIZ-VULN-2026527 4 file(s)
WIZ-VULN-2026544 4 file(s)
WIZ-VULN-2026561 4 file(s)
WIZ-VULN-2026578 4 file(s)
WIZ-VULN-2026595 4 file(s)
WIZ-VULN-2026612 4 file(s)
WIZ-VULN-2026629 4 file(s)
WIZ-VULN-2026646 4 file(s)
WIZ-VULN-2026663 4 file(s)
WIZ-VULN-2026680 4 file(s)
WIZ-VULN-2026697 4 file(s)
WIZ-VULN-2026714 4 file(s)
WIZ-VULN-2026731 4 file(s)
WIZ-VULN-2026748 4 file(s)
WIZ-VULN-2026765 4 file(s)
WIZ-VULN-2026782 4 file(s)
WIZ-VULN-2026799 4 file(s)
WIZ-VULN-2026816 4 file(s)
WIZ-VULN-2026833 4 file(s)
WIZ-VULN-2026850 4 file(s)
WIZ-VULN-2026867 4 file(s)
WIZ-VULN-2026884 4 file(s)
WIZ-VULN-2026901 4 file(s)
WIZ-VULN-2026918 4 file(s)
WIZ-VULN-2026935 4 file(s)
WIZ-VULN-2026952 4 file(s)
WIZ-VULN-2026969 4 file(s)
WIZ-VULN-2026986 4 file(s)
WIZ-VULN-2027003 4 file(s)
WIZ-VULN-2027020 4 file(s)
WIZ-VULN-2027037 4 file(s)
WIZ-VULN-2027054 4 file(s)
WIZ-VULN-2027071 4 file(s)
WIZ-VULN-2027088 4 file(s)
WIZ-VULN-2027105 4 file(s)
WIZ-VULN-2027122 4 file(s)
WIZ-VULN-2027139 4 file(s)
WIZ-VULN-2027156 4 file(s)
WIZ-VULN-2027173 4 file(s)
WIZ-VULN-2027190 4 file(s)
WIZ-VULN-2027207 4 file(s)
WIZ-VULN-2027224 4 file(s)
WIZ-VULN-2027241 4 file(s)
WIZ-VULN-2027258 4 file(s)
WIZ-VULN-2027275 4 file(s)
WIZ-VULN-2027292 4 file(s)
WIZ-VULN-2027309 4 file(s)
WIZ-VULN-2027326 4 file(s)
WIZ-VULN-2027343 4 file(s)
WIZ-VULN-2027360 4 file(s)
WIZ-VULN-2027377 4 file(s)
WIZ-VULN-2027394 4 file(s)
WIZ-VULN-2027411 4 file(s)
WIZ-VULN-2027428 4 file(s)
WIZ-VULN-2027445 4 file(s)
WIZ-VULN-2027462 4 file(s)
WIZ-VULN-2027479 4 file(s)
WIZ-VULN-2027496 4 file(s)
WIZ-VULN-2027513 4 file(s)

Total: 90 samples tested

Legend: ✓ Pass | ✗ Fail | ◐ Inconclusive | ⚠ Warn | ◌ Pending | – Not Tested
AI TESTING PROVENANCE (Evidence-First):
Total AI Results: 360
Samples Tested: 90
Accepted: 348
Overridden: 12
Avg Confidence: 92.6%
<70%: 0
≥90%: 268
Sample Attribute AI Result Confidence Auditor Rationale Model
WIZ-VULN-2026000Scanning CoveragePASS87%✓ Accepted
by Sarah Kim, CPA on 6 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026000Timely RemediationPASS90%✓ Accepted
by Sarah Kim, CPA on 16 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026000Exception ManagementPASS93%✓ Accepted
by Sarah Kim, CPA on 26 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026000Validation ScanningPASS96%✓ Accepted
by Sarah Kim, CPA on 8 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026017Scanning CoveragePASS94%✓ Accepted
by Sarah Kim, CPA on 14 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026017Timely RemediationPASS97%✓ Accepted
by Sarah Kim, CPA on 24 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026017Exception ManagementPASS87%✓ Accepted
by Sarah Kim, CPA on 6 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026017Validation ScanningPASS90%✓ Accepted
by Sarah Kim, CPA on 16 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026034Scanning CoveragePASS88%✓ Accepted
by Sarah Kim, CPA on 22 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026034Timely RemediationPASS91%✓ Accepted
by Sarah Kim, CPA on 11 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026034Exception ManagementPASS94%✓ Accepted
by Sarah Kim, CPA on 14 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026034Validation ScanningPASS97%✓ Accepted
by Sarah Kim, CPA on 24 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026051Scanning CoveragePASS95%✓ Accepted
by Sarah Kim, CPA on 9 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026051Timely RemediationPASS98%✓ Accepted
by Sarah Kim, CPA on 19 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026051Exception ManagementPASS88%✓ Accepted
by Sarah Kim, CPA on 22 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026051Validation ScanningPASS91%✓ Accepted
by Sarah Kim, CPA on 11 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026068Scanning CoveragePASS89%✓ Accepted
by Sarah Kim, CPA on 17 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026068Timely RemediationPASS92%✓ Accepted
by Sarah Kim, CPA on 20 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026068Exception ManagementPASS95%✓ Accepted
by Sarah Kim, CPA on 9 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026068Validation ScanningPASS98%✓ Accepted
by Sarah Kim, CPA on 19 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026085Scanning CoveragePASS96%✓ Accepted
by Sarah Kim, CPA on 25 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026085Timely RemediationPASS99%✓ Accepted
by Sarah Kim, CPA on 7 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026085Exception ManagementPASS89%✓ Accepted
by Sarah Kim, CPA on 17 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026085Validation ScanningPASS92%✓ Accepted
by Sarah Kim, CPA on 20 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026102Scanning CoveragePASS90%✓ Accepted
by Sarah Kim, CPA on 12 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026102Timely RemediationPASS93%✓ Accepted
by Sarah Kim, CPA on 15 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026102Exception ManagementPASS96%✓ Accepted
by Sarah Kim, CPA on 25 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026102Validation ScanningPASS99%✓ Accepted
by Sarah Kim, CPA on 7 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026119Scanning CoveragePASS97%✓ Accepted
by Sarah Kim, CPA on 13 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026119Timely RemediationPASS87%✓ Accepted
by Sarah Kim, CPA on 23 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026119Exception ManagementPASS90%✓ Accepted
by Sarah Kim, CPA on 12 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026119Validation ScanningPASS93%✓ Accepted
by Sarah Kim, CPA on 15 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026136Scanning CoveragePASS91%✓ Accepted
by Sarah Kim, CPA on 21 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026136Timely RemediationPASS94%✓ Accepted
by Sarah Kim, CPA on 10 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026136Exception ManagementPASS97%✓ Accepted
by Sarah Kim, CPA on 13 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026136Validation ScanningPASS83%↻ Overridden
by Sarah Kim, CPA on 23 Mar 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
WIZ-VULN-2026153Scanning CoveragePASS98%✓ Accepted
by Sarah Kim, CPA on 8 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026153Timely RemediationPASS88%✓ Accepted
by Sarah Kim, CPA on 18 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026153Exception ManagementPASS83%↻ Overridden
by Sarah Kim, CPA on 21 Mar 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
WIZ-VULN-2026153Validation ScanningPASS94%✓ Accepted
by Sarah Kim, CPA on 10 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026170Scanning CoveragePASS92%✓ Accepted
by Sarah Kim, CPA on 16 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026170Timely RemediationPASS83%↻ Overridden
by Sarah Kim, CPA on 26 Mar 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
WIZ-VULN-2026170Exception ManagementPASS98%✓ Accepted
by Sarah Kim, CPA on 8 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026170Validation ScanningPASS88%✓ Accepted
by Sarah Kim, CPA on 18 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026187Scanning CoveragePASS83%↻ Overridden
by Sarah Kim, CPA on 24 Mar 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
WIZ-VULN-2026187Timely RemediationPASS89%✓ Accepted
by Sarah Kim, CPA on 6 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026187Exception ManagementPASS92%✓ Accepted
by Sarah Kim, CPA on 16 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026187Validation ScanningPASS95%✓ Accepted
by Sarah Kim, CPA on 26 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026204Scanning CoveragePASS93%✓ Accepted
by Sarah Kim, CPA on 11 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026204Timely RemediationPASS96%✓ Accepted
by Sarah Kim, CPA on 14 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026204Exception ManagementPASS99%✓ Accepted
by Sarah Kim, CPA on 24 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026204Validation ScanningPASS89%✓ Accepted
by Sarah Kim, CPA on 6 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026221Scanning CoveragePASS87%✓ Accepted
by Sarah Kim, CPA on 19 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026221Timely RemediationPASS90%✓ Accepted
by Sarah Kim, CPA on 22 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026221Exception ManagementPASS93%✓ Accepted
by Sarah Kim, CPA on 11 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026221Validation ScanningPASS96%✓ Accepted
by Sarah Kim, CPA on 14 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026238Scanning CoveragePASS94%✓ Accepted
by Sarah Kim, CPA on 20 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026238Timely RemediationPASS97%✓ Accepted
by Sarah Kim, CPA on 9 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026238Exception ManagementPASS87%✓ Accepted
by Sarah Kim, CPA on 19 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026238Validation ScanningPASS90%✓ Accepted
by Sarah Kim, CPA on 22 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026255Scanning CoveragePASS88%✓ Accepted
by Sarah Kim, CPA on 7 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026255Timely RemediationPASS91%✓ Accepted
by Sarah Kim, CPA on 17 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026255Exception ManagementPASS94%✓ Accepted
by Sarah Kim, CPA on 20 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026255Validation ScanningPASS97%✓ Accepted
by Sarah Kim, CPA on 9 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026272Scanning CoveragePASS95%✓ Accepted
by Sarah Kim, CPA on 15 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026272Timely RemediationPASS98%✓ Accepted
by Sarah Kim, CPA on 25 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026272Exception ManagementPASS88%✓ Accepted
by Sarah Kim, CPA on 7 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026272Validation ScanningPASS91%✓ Accepted
by Sarah Kim, CPA on 17 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026289Scanning CoveragePASS89%✓ Accepted
by Sarah Kim, CPA on 23 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026289Timely RemediationPASS92%✓ Accepted
by Sarah Kim, CPA on 12 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026289Exception ManagementPASS95%✓ Accepted
by Sarah Kim, CPA on 15 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026289Validation ScanningPASS98%✓ Accepted
by Sarah Kim, CPA on 25 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026306Scanning CoveragePASS96%✓ Accepted
by Sarah Kim, CPA on 10 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026306Timely RemediationPASS99%✓ Accepted
by Sarah Kim, CPA on 13 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026306Exception ManagementPASS89%✓ Accepted
by Sarah Kim, CPA on 23 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026306Validation ScanningPASS92%✓ Accepted
by Sarah Kim, CPA on 12 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026323Scanning CoveragePASS90%✓ Accepted
by Sarah Kim, CPA on 18 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026323Timely RemediationPASS93%✓ Accepted
by Sarah Kim, CPA on 21 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026323Exception ManagementPASS96%✓ Accepted
by Sarah Kim, CPA on 10 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026323Validation ScanningPASS99%✓ Accepted
by Sarah Kim, CPA on 13 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026340Scanning CoveragePASS97%✓ Accepted
by Sarah Kim, CPA on 26 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026340Timely RemediationPASS87%✓ Accepted
by Sarah Kim, CPA on 8 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026340Exception ManagementPASS90%✓ Accepted
by Sarah Kim, CPA on 18 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026340Validation ScanningPASS93%✓ Accepted
by Sarah Kim, CPA on 21 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026357Scanning CoveragePASS91%✓ Accepted
by Sarah Kim, CPA on 6 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026357Timely RemediationPASS94%✓ Accepted
by Sarah Kim, CPA on 16 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026357Exception ManagementPASS97%✓ Accepted
by Sarah Kim, CPA on 26 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026357Validation ScanningPASS87%✓ Accepted
by Sarah Kim, CPA on 8 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026374Scanning CoveragePASS98%✓ Accepted
by Sarah Kim, CPA on 14 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026374Timely RemediationPASS88%✓ Accepted
by Sarah Kim, CPA on 24 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026374Exception ManagementPASS91%✓ Accepted
by Sarah Kim, CPA on 6 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026374Validation ScanningPASS94%✓ Accepted
by Sarah Kim, CPA on 16 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026391Scanning CoveragePASS92%✓ Accepted
by Sarah Kim, CPA on 22 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026391Timely RemediationPASS95%✓ Accepted
by Sarah Kim, CPA on 11 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026391Exception ManagementPASS98%✓ Accepted
by Sarah Kim, CPA on 14 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026391Validation ScanningPASS88%✓ Accepted
by Sarah Kim, CPA on 24 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026408Scanning CoveragePASS99%✓ Accepted
by Sarah Kim, CPA on 9 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026408Timely RemediationPASS89%✓ Accepted
by Sarah Kim, CPA on 19 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026408Exception ManagementPASS92%✓ Accepted
by Sarah Kim, CPA on 22 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026408Validation ScanningPASS95%✓ Accepted
by Sarah Kim, CPA on 11 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026425Scanning CoveragePASS93%✓ Accepted
by Sarah Kim, CPA on 17 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026425Timely RemediationPASS96%✓ Accepted
by Sarah Kim, CPA on 20 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026425Exception ManagementPASS99%✓ Accepted
by Sarah Kim, CPA on 9 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026425Validation ScanningPASS89%✓ Accepted
by Sarah Kim, CPA on 19 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026442Scanning CoveragePASS87%✓ Accepted
by Sarah Kim, CPA on 25 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026442Timely RemediationPASS90%✓ Accepted
by Sarah Kim, CPA on 7 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026442Exception ManagementPASS93%✓ Accepted
by Sarah Kim, CPA on 17 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026442Validation ScanningPASS96%✓ Accepted
by Sarah Kim, CPA on 20 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026459Scanning CoveragePASS94%✓ Accepted
by Sarah Kim, CPA on 12 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026459Timely RemediationPASS97%✓ Accepted
by Sarah Kim, CPA on 15 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026459Exception ManagementPASS87%✓ Accepted
by Sarah Kim, CPA on 25 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026459Validation ScanningPASS90%✓ Accepted
by Sarah Kim, CPA on 7 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026476Scanning CoveragePASS88%✓ Accepted
by Sarah Kim, CPA on 13 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026476Timely RemediationPASS91%✓ Accepted
by Sarah Kim, CPA on 23 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026476Exception ManagementPASS94%✓ Accepted
by Sarah Kim, CPA on 12 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026476Validation ScanningPASS97%✓ Accepted
by Sarah Kim, CPA on 15 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026493Scanning CoveragePASS95%✓ Accepted
by Sarah Kim, CPA on 21 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026493Timely RemediationPASS98%✓ Accepted
by Sarah Kim, CPA on 10 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026493Exception ManagementPASS88%✓ Accepted
by Sarah Kim, CPA on 13 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026493Validation ScanningPASS91%✓ Accepted
by Sarah Kim, CPA on 23 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026510Scanning CoveragePASS89%✓ Accepted
by Sarah Kim, CPA on 8 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026510Timely RemediationPASS92%✓ Accepted
by Sarah Kim, CPA on 18 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026510Exception ManagementPASS95%✓ Accepted
by Sarah Kim, CPA on 21 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026510Validation ScanningPASS98%✓ Accepted
by Sarah Kim, CPA on 10 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026527Scanning CoveragePASS96%✓ Accepted
by Sarah Kim, CPA on 16 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026527Timely RemediationPASS99%✓ Accepted
by Sarah Kim, CPA on 26 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026527Exception ManagementPASS89%✓ Accepted
by Sarah Kim, CPA on 8 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026527Validation ScanningPASS92%✓ Accepted
by Sarah Kim, CPA on 18 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026544Scanning CoveragePASS90%✓ Accepted
by Sarah Kim, CPA on 24 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026544Timely RemediationPASS93%✓ Accepted
by Sarah Kim, CPA on 6 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026544Exception ManagementPASS96%✓ Accepted
by Sarah Kim, CPA on 16 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026544Validation ScanningPASS99%✓ Accepted
by Sarah Kim, CPA on 26 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026561Scanning CoveragePASS97%✓ Accepted
by Sarah Kim, CPA on 11 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026561Timely RemediationPASS87%✓ Accepted
by Sarah Kim, CPA on 14 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026561Exception ManagementPASS90%✓ Accepted
by Sarah Kim, CPA on 24 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026561Validation ScanningPASS93%✓ Accepted
by Sarah Kim, CPA on 6 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026578Scanning CoveragePASS91%✓ Accepted
by Sarah Kim, CPA on 19 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026578Timely RemediationPASS94%✓ Accepted
by Sarah Kim, CPA on 22 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026578Exception ManagementPASS97%✓ Accepted
by Sarah Kim, CPA on 11 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026578Validation ScanningPASS87%✓ Accepted
by Sarah Kim, CPA on 14 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026595Scanning CoveragePASS98%✓ Accepted
by Sarah Kim, CPA on 20 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026595Timely RemediationPASS88%✓ Accepted
by Sarah Kim, CPA on 9 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026595Exception ManagementPASS91%✓ Accepted
by Sarah Kim, CPA on 19 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026595Validation ScanningPASS94%✓ Accepted
by Sarah Kim, CPA on 22 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026612Scanning CoveragePASS92%✓ Accepted
by Sarah Kim, CPA on 7 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026612Timely RemediationPASS95%✓ Accepted
by Sarah Kim, CPA on 17 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026612Exception ManagementPASS98%✓ Accepted
by Sarah Kim, CPA on 20 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026612Validation ScanningPASS88%✓ Accepted
by Sarah Kim, CPA on 9 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026629Scanning CoveragePASS99%✓ Accepted
by Sarah Kim, CPA on 15 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026629Timely RemediationPASS89%✓ Accepted
by Sarah Kim, CPA on 25 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026629Exception ManagementPASS92%✓ Accepted
by Sarah Kim, CPA on 7 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026629Validation ScanningPASS95%✓ Accepted
by Sarah Kim, CPA on 17 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026646Scanning CoveragePASS93%✓ Accepted
by Sarah Kim, CPA on 23 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026646Timely RemediationPASS96%✓ Accepted
by Sarah Kim, CPA on 12 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026646Exception ManagementPASS99%✓ Accepted
by Sarah Kim, CPA on 15 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026646Validation ScanningPASS89%✓ Accepted
by Sarah Kim, CPA on 25 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026663Scanning CoveragePASS87%✓ Accepted
by Sarah Kim, CPA on 10 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026663Timely RemediationPASS90%✓ Accepted
by Sarah Kim, CPA on 13 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026663Exception ManagementPASS93%✓ Accepted
by Sarah Kim, CPA on 23 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026663Validation ScanningPASS96%✓ Accepted
by Sarah Kim, CPA on 12 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026680Scanning CoveragePASS94%✓ Accepted
by Sarah Kim, CPA on 18 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026680Timely RemediationPASS97%✓ Accepted
by Sarah Kim, CPA on 21 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026680Exception ManagementPASS87%✓ Accepted
by Sarah Kim, CPA on 10 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026680Validation ScanningPASS90%✓ Accepted
by Sarah Kim, CPA on 13 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026697Scanning CoveragePASS88%✓ Accepted
by Sarah Kim, CPA on 26 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026697Timely RemediationPASS91%✓ Accepted
by Sarah Kim, CPA on 8 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026697Exception ManagementPASS94%✓ Accepted
by Sarah Kim, CPA on 18 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026697Validation ScanningPASS97%✓ Accepted
by Sarah Kim, CPA on 21 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026714Scanning CoveragePASS95%✓ Accepted
by Sarah Kim, CPA on 6 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026714Timely RemediationPASS98%✓ Accepted
by Sarah Kim, CPA on 16 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026714Exception ManagementPASS88%✓ Accepted
by Sarah Kim, CPA on 26 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026714Validation ScanningPASS91%✓ Accepted
by Sarah Kim, CPA on 8 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026731Scanning CoveragePASS89%✓ Accepted
by Sarah Kim, CPA on 14 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026731Timely RemediationPASS92%✓ Accepted
by Sarah Kim, CPA on 24 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026731Exception ManagementPASS95%✓ Accepted
by Sarah Kim, CPA on 6 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026731Validation ScanningPASS82%↻ Overridden
by Sarah Kim, CPA on 16 Mar 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
WIZ-VULN-2026748Scanning CoveragePASS96%✓ Accepted
by Sarah Kim, CPA on 22 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026748Timely RemediationPASS99%✓ Accepted
by Sarah Kim, CPA on 11 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026748Exception ManagementPASS82%↻ Overridden
by Sarah Kim, CPA on 14 Mar 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
WIZ-VULN-2026748Validation ScanningPASS92%✓ Accepted
by Sarah Kim, CPA on 24 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026765Scanning CoveragePASS90%✓ Accepted
by Sarah Kim, CPA on 9 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026765Timely RemediationPASS82%↻ Overridden
by Sarah Kim, CPA on 19 Mar 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
WIZ-VULN-2026765Exception ManagementPASS96%✓ Accepted
by Sarah Kim, CPA on 22 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026765Validation ScanningPASS99%✓ Accepted
by Sarah Kim, CPA on 11 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026782Scanning CoveragePASS82%↻ Overridden
by Sarah Kim, CPA on 17 Mar 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-haiku-4-5-20251001
WIZ-VULN-2026782Timely RemediationPASS87%✓ Accepted
by Sarah Kim, CPA on 20 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026782Exception ManagementPASS90%✓ Accepted
by Sarah Kim, CPA on 9 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026782Validation ScanningPASS93%✓ Accepted
by Sarah Kim, CPA on 19 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026799Scanning CoveragePASS91%✓ Accepted
by Sarah Kim, CPA on 25 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026799Timely RemediationPASS94%✓ Accepted
by Sarah Kim, CPA on 7 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026799Exception ManagementPASS97%✓ Accepted
by Sarah Kim, CPA on 17 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026799Validation ScanningPASS87%✓ Accepted
by Sarah Kim, CPA on 20 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026816Scanning CoveragePASS98%✓ Accepted
by Sarah Kim, CPA on 12 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026816Timely RemediationPASS88%✓ Accepted
by Sarah Kim, CPA on 15 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026816Exception ManagementPASS91%✓ Accepted
by Sarah Kim, CPA on 25 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026816Validation ScanningPASS94%✓ Accepted
by Sarah Kim, CPA on 7 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026833Scanning CoveragePASS92%✓ Accepted
by Sarah Kim, CPA on 13 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026833Timely RemediationPASS95%✓ Accepted
by Sarah Kim, CPA on 23 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026833Exception ManagementPASS98%✓ Accepted
by Sarah Kim, CPA on 12 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026833Validation ScanningPASS88%✓ Accepted
by Sarah Kim, CPA on 15 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026850Scanning CoveragePASS99%✓ Accepted
by Sarah Kim, CPA on 21 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026850Timely RemediationPASS89%✓ Accepted
by Sarah Kim, CPA on 10 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026850Exception ManagementPASS92%✓ Accepted
by Sarah Kim, CPA on 13 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026850Validation ScanningPASS95%✓ Accepted
by Sarah Kim, CPA on 23 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026867Scanning CoveragePASS93%✓ Accepted
by Sarah Kim, CPA on 8 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026867Timely RemediationPASS96%✓ Accepted
by Sarah Kim, CPA on 18 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026867Exception ManagementPASS99%✓ Accepted
by Sarah Kim, CPA on 21 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026867Validation ScanningPASS89%✓ Accepted
by Sarah Kim, CPA on 10 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026884Scanning CoveragePASS87%✓ Accepted
by Sarah Kim, CPA on 16 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026884Timely RemediationPASS90%✓ Accepted
by Sarah Kim, CPA on 26 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026884Exception ManagementPASS93%✓ Accepted
by Sarah Kim, CPA on 8 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026884Validation ScanningPASS96%✓ Accepted
by Sarah Kim, CPA on 18 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026901Scanning CoveragePASS94%✓ Accepted
by Sarah Kim, CPA on 24 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026901Timely RemediationPASS97%✓ Accepted
by Sarah Kim, CPA on 6 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026901Exception ManagementPASS87%✓ Accepted
by Sarah Kim, CPA on 16 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026901Validation ScanningPASS90%✓ Accepted
by Sarah Kim, CPA on 26 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026918Scanning CoveragePASS88%✓ Accepted
by Sarah Kim, CPA on 11 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026918Timely RemediationPASS91%✓ Accepted
by Sarah Kim, CPA on 14 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026918Exception ManagementPASS94%✓ Accepted
by Sarah Kim, CPA on 24 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026918Validation ScanningPASS97%✓ Accepted
by Sarah Kim, CPA on 6 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026935Scanning CoveragePASS95%✓ Accepted
by Sarah Kim, CPA on 19 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2026935Timely RemediationPASS98%✓ Accepted
by Sarah Kim, CPA on 22 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026935Exception ManagementPASS88%✓ Accepted
by Sarah Kim, CPA on 11 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026935Validation ScanningPASS91%✓ Accepted
by Sarah Kim, CPA on 14 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026952Scanning CoveragePASS89%✓ Accepted
by Sarah Kim, CPA on 20 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2026952Timely RemediationPASS92%✓ Accepted
by Sarah Kim, CPA on 9 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026952Exception ManagementPASS95%✓ Accepted
by Sarah Kim, CPA on 19 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026952Validation ScanningPASS98%✓ Accepted
by Sarah Kim, CPA on 22 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026969Scanning CoveragePASS96%✓ Accepted
by Sarah Kim, CPA on 7 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2026969Timely RemediationPASS99%✓ Accepted
by Sarah Kim, CPA on 17 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026969Exception ManagementPASS89%✓ Accepted
by Sarah Kim, CPA on 20 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026969Validation ScanningPASS92%✓ Accepted
by Sarah Kim, CPA on 9 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026986Scanning CoveragePASS90%✓ Accepted
by Sarah Kim, CPA on 15 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2026986Timely RemediationPASS93%✓ Accepted
by Sarah Kim, CPA on 25 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2026986Exception ManagementPASS96%✓ Accepted
by Sarah Kim, CPA on 7 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2026986Validation ScanningPASS99%✓ Accepted
by Sarah Kim, CPA on 17 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2027003Scanning CoveragePASS97%✓ Accepted
by Sarah Kim, CPA on 23 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2027003Timely RemediationPASS87%✓ Accepted
by Sarah Kim, CPA on 12 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2027003Exception ManagementPASS90%✓ Accepted
by Sarah Kim, CPA on 15 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2027003Validation ScanningPASS93%✓ Accepted
by Sarah Kim, CPA on 25 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2027020Scanning CoveragePASS91%✓ Accepted
by Sarah Kim, CPA on 10 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2027020Timely RemediationPASS94%✓ Accepted
by Sarah Kim, CPA on 13 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2027020Exception ManagementPASS97%✓ Accepted
by Sarah Kim, CPA on 23 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2027020Validation ScanningPASS87%✓ Accepted
by Sarah Kim, CPA on 12 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2027037Scanning CoveragePASS98%✓ Accepted
by Sarah Kim, CPA on 18 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2027037Timely RemediationPASS88%✓ Accepted
by Sarah Kim, CPA on 21 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2027037Exception ManagementPASS91%✓ Accepted
by Sarah Kim, CPA on 10 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2027037Validation ScanningPASS94%✓ Accepted
by Sarah Kim, CPA on 13 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2027054Scanning CoveragePASS92%✓ Accepted
by Sarah Kim, CPA on 26 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2027054Timely RemediationPASS95%✓ Accepted
by Sarah Kim, CPA on 8 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2027054Exception ManagementPASS98%✓ Accepted
by Sarah Kim, CPA on 18 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2027054Validation ScanningPASS88%✓ Accepted
by Sarah Kim, CPA on 21 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2027071Scanning CoveragePASS99%✓ Accepted
by Sarah Kim, CPA on 6 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2027071Timely RemediationPASS89%✓ Accepted
by Sarah Kim, CPA on 16 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2027071Exception ManagementPASS92%✓ Accepted
by Sarah Kim, CPA on 26 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2027071Validation ScanningPASS95%✓ Accepted
by Sarah Kim, CPA on 8 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2027088Scanning CoveragePASS93%✓ Accepted
by Sarah Kim, CPA on 14 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2027088Timely RemediationPASS96%✓ Accepted
by Sarah Kim, CPA on 24 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2027088Exception ManagementPASS99%✓ Accepted
by Sarah Kim, CPA on 6 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2027088Validation ScanningPASS89%✓ Accepted
by Sarah Kim, CPA on 16 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2027105Scanning CoveragePASS87%✓ Accepted
by Sarah Kim, CPA on 22 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2027105Timely RemediationPASS90%✓ Accepted
by Sarah Kim, CPA on 11 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2027105Exception ManagementPASS93%✓ Accepted
by Sarah Kim, CPA on 14 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2027105Validation ScanningPASS96%✓ Accepted
by Sarah Kim, CPA on 24 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2027122Scanning CoveragePASS94%✓ Accepted
by Sarah Kim, CPA on 9 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2027122Timely RemediationPASS97%✓ Accepted
by Sarah Kim, CPA on 19 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2027122Exception ManagementPASS87%✓ Accepted
by Sarah Kim, CPA on 22 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2027122Validation ScanningPASS90%✓ Accepted
by Sarah Kim, CPA on 11 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2027139Scanning CoveragePASS88%✓ Accepted
by Sarah Kim, CPA on 17 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2027139Timely RemediationPASS91%✓ Accepted
by Sarah Kim, CPA on 20 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2027139Exception ManagementPASS94%✓ Accepted
by Sarah Kim, CPA on 9 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2027139Validation ScanningPASS97%✓ Accepted
by Sarah Kim, CPA on 19 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2027156Scanning CoveragePASS95%✓ Accepted
by Sarah Kim, CPA on 25 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2027156Timely RemediationPASS98%✓ Accepted
by Sarah Kim, CPA on 7 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2027156Exception ManagementPASS88%✓ Accepted
by Sarah Kim, CPA on 17 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2027156Validation ScanningPASS91%✓ Accepted
by Sarah Kim, CPA on 20 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2027173Scanning CoveragePASS89%✓ Accepted
by Sarah Kim, CPA on 12 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2027173Timely RemediationPASS92%✓ Accepted
by Sarah Kim, CPA on 15 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2027173Exception ManagementPASS95%✓ Accepted
by Sarah Kim, CPA on 25 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2027173Validation ScanningPASS98%✓ Accepted
by Sarah Kim, CPA on 7 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2027190Scanning CoveragePASS96%✓ Accepted
by Sarah Kim, CPA on 13 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2027190Timely RemediationPASS99%✓ Accepted
by Sarah Kim, CPA on 23 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2027190Exception ManagementPASS89%✓ Accepted
by Sarah Kim, CPA on 12 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2027190Validation ScanningPASS92%✓ Accepted
by Sarah Kim, CPA on 15 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2027207Scanning CoveragePASS90%✓ Accepted
by Sarah Kim, CPA on 21 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2027207Timely RemediationPASS93%✓ Accepted
by Sarah Kim, CPA on 10 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2027207Exception ManagementPASS96%✓ Accepted
by Sarah Kim, CPA on 13 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2027207Validation ScanningPASS99%✓ Accepted
by Sarah Kim, CPA on 23 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2027224Scanning CoveragePASS97%✓ Accepted
by Sarah Kim, CPA on 8 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2027224Timely RemediationPASS87%✓ Accepted
by Sarah Kim, CPA on 18 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2027224Exception ManagementPASS90%✓ Accepted
by Sarah Kim, CPA on 21 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2027224Validation ScanningPASS93%✓ Accepted
by Sarah Kim, CPA on 10 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2027241Scanning CoveragePASS91%✓ Accepted
by Sarah Kim, CPA on 16 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2027241Timely RemediationPASS94%✓ Accepted
by Sarah Kim, CPA on 26 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2027241Exception ManagementPASS97%✓ Accepted
by Sarah Kim, CPA on 8 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2027241Validation ScanningPASS87%✓ Accepted
by Sarah Kim, CPA on 18 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2027258Scanning CoveragePASS98%✓ Accepted
by Sarah Kim, CPA on 24 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2027258Timely RemediationPASS88%✓ Accepted
by Sarah Kim, CPA on 6 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2027258Exception ManagementPASS91%✓ Accepted
by Sarah Kim, CPA on 16 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2027258Validation ScanningPASS94%✓ Accepted
by Sarah Kim, CPA on 26 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2027275Scanning CoveragePASS92%✓ Accepted
by Sarah Kim, CPA on 11 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2027275Timely RemediationPASS95%✓ Accepted
by Sarah Kim, CPA on 14 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2027275Exception ManagementPASS98%✓ Accepted
by Sarah Kim, CPA on 24 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2027275Validation ScanningPASS88%✓ Accepted
by Sarah Kim, CPA on 6 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2027292Scanning CoveragePASS99%✓ Accepted
by Sarah Kim, CPA on 19 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2027292Timely RemediationPASS89%✓ Accepted
by Sarah Kim, CPA on 22 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2027292Exception ManagementPASS92%✓ Accepted
by Sarah Kim, CPA on 11 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2027292Validation ScanningPASS95%✓ Accepted
by Sarah Kim, CPA on 14 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2027309Scanning CoveragePASS93%✓ Accepted
by Sarah Kim, CPA on 20 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2027309Timely RemediationPASS96%✓ Accepted
by Sarah Kim, CPA on 9 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2027309Exception ManagementPASS99%✓ Accepted
by Sarah Kim, CPA on 19 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2027309Validation ScanningPASS89%✓ Accepted
by Sarah Kim, CPA on 22 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2027326Scanning CoveragePASS87%✓ Accepted
by Sarah Kim, CPA on 7 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2027326Timely RemediationPASS90%✓ Accepted
by Sarah Kim, CPA on 17 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2027326Exception ManagementPASS93%✓ Accepted
by Sarah Kim, CPA on 20 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2027326Validation ScanningPASS81%↻ Overridden
by Sarah Kim, CPA on 9 Mar 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
WIZ-VULN-2027343Scanning CoveragePASS94%✓ Accepted
by Sarah Kim, CPA on 15 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2027343Timely RemediationPASS97%✓ Accepted
by Sarah Kim, CPA on 25 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2027343Exception ManagementPASS81%↻ Overridden
by Sarah Kim, CPA on 7 Mar 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
WIZ-VULN-2027343Validation ScanningPASS90%✓ Accepted
by Sarah Kim, CPA on 17 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2027360Scanning CoveragePASS88%✓ Accepted
by Sarah Kim, CPA on 23 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2027360Timely RemediationPASS81%↻ Overridden
by Sarah Kim, CPA on 12 Mar 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
WIZ-VULN-2027360Exception ManagementPASS94%✓ Accepted
by Sarah Kim, CPA on 15 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2027360Validation ScanningPASS97%✓ Accepted
by Sarah Kim, CPA on 25 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2027377Scanning CoveragePASS81%↻ Overridden
by Sarah Kim, CPA on 10 Mar 2027, 10:00 UTC
Reviewed evidence directly; partial-artifact concern resolved by reviewing supplemental file in evidence pack.claude-sonnet-4-6
WIZ-VULN-2027377Timely RemediationPASS98%✓ Accepted
by Sarah Kim, CPA on 13 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2027377Exception ManagementPASS88%✓ Accepted
by Sarah Kim, CPA on 23 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2027377Validation ScanningPASS91%✓ Accepted
by Sarah Kim, CPA on 12 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2027394Scanning CoveragePASS89%✓ Accepted
by Sarah Kim, CPA on 18 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2027394Timely RemediationPASS92%✓ Accepted
by Sarah Kim, CPA on 21 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2027394Exception ManagementPASS95%✓ Accepted
by Sarah Kim, CPA on 10 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2027394Validation ScanningPASS98%✓ Accepted
by Sarah Kim, CPA on 13 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2027411Scanning CoveragePASS96%✓ Accepted
by Sarah Kim, CPA on 26 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2027411Timely RemediationPASS99%✓ Accepted
by Sarah Kim, CPA on 8 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2027411Exception ManagementPASS89%✓ Accepted
by Sarah Kim, CPA on 18 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2027411Validation ScanningPASS92%✓ Accepted
by Sarah Kim, CPA on 21 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2027428Scanning CoveragePASS90%✓ Accepted
by Sarah Kim, CPA on 6 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2027428Timely RemediationPASS93%✓ Accepted
by Sarah Kim, CPA on 16 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2027428Exception ManagementPASS96%✓ Accepted
by Sarah Kim, CPA on 26 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2027428Validation ScanningPASS99%✓ Accepted
by Sarah Kim, CPA on 8 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2027445Scanning CoveragePASS97%✓ Accepted
by Sarah Kim, CPA on 14 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2027445Timely RemediationPASS87%✓ Accepted
by Sarah Kim, CPA on 24 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2027445Exception ManagementPASS90%✓ Accepted
by Sarah Kim, CPA on 6 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2027445Validation ScanningPASS93%✓ Accepted
by Sarah Kim, CPA on 16 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2027462Scanning CoveragePASS91%✓ Accepted
by Sarah Kim, CPA on 22 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001
WIZ-VULN-2027462Timely RemediationPASS94%✓ Accepted
by Sarah Kim, CPA on 11 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2027462Exception ManagementPASS97%✓ Accepted
by Sarah Kim, CPA on 14 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2027462Validation ScanningPASS87%✓ Accepted
by Sarah Kim, CPA on 24 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2027479Scanning CoveragePASS98%✓ Accepted
by Sarah Kim, CPA on 9 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-sonnet-4-6
WIZ-VULN-2027479Timely RemediationPASS88%✓ Accepted
by Sarah Kim, CPA on 19 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2027479Exception ManagementPASS91%✓ Accepted
by Sarah Kim, CPA on 22 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2027479Validation ScanningPASS94%✓ Accepted
by Sarah Kim, CPA on 11 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2027496Scanning CoveragePASS92%✓ Accepted
by Sarah Kim, CPA on 17 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-haiku-4-5-20251001
WIZ-VULN-2027496Timely RemediationPASS95%✓ Accepted
by Sarah Kim, CPA on 20 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2027496Exception ManagementPASS98%✓ Accepted
by Sarah Kim, CPA on 9 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2027496Validation ScanningPASS88%✓ Accepted
by Sarah Kim, CPA on 19 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2027513Scanning CoveragePASS99%✓ Accepted
by Sarah Kim, CPA on 25 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-sonnet-4-6
WIZ-VULN-2027513Timely RemediationPASS89%✓ Accepted
by Sarah Kim, CPA on 7 Mar 2027, 10:00 UTC
Vulnerability triaged within 24h; remediation tracker shows closure within the policy SLA (high = 30d, critical = 7d). Closure verified by Security Engineering.claude-haiku-4-5-20251001
WIZ-VULN-2027513Exception ManagementPASS92%✓ Accepted
by Sarah Kim, CPA on 17 Mar 2027, 10:00 UTC
Wiz scan result reviewed; severity classification matches CVSS score band; remediation ticket linked to closure evidence.claude-sonnet-4-6
WIZ-VULN-2027513Validation ScanningPASS95%✓ Accepted
by Sarah Kim, CPA on 20 Mar 2027, 10:00 UTC
Critical vulnerability remediated within 5 days (within 7d SLA); root-cause analysis documented; compensating monitoring in place during remediation window.claude-haiku-4-5-20251001

Total: 360 AI test results

Note: All AI test results require auditor review before conclusions can be locked (Evidence-First methodology).
Traceability (Change Controls) 8
AICPA AU-C 315 — Understanding Controls Over Change Management

Traceability chains apply to Change Management controls only. Each chain traces a change through 5 nodes: Ticket → Approval → Testing → Deployment → Closure.

C1 Normal Change Approvals
Effective with Exceptions
Sample TicketApprovalTestingDeploymentClosure Status
CHG-2026-1042 ✓ JIRA-C1-1042✓ CAB-2026-001✓ CI-100000✓ GH-Deploy-5000✓ JIRA-C1-1042-CLOSED Complete
CHG-2026-1043 ✓ JIRA-C1-1043✓ CAB-2026-002✓ CI-100001✓ GH-Deploy-5001✓ JIRA-C1-1043-CLOSED Complete
CHG-2026-1044 ✓ JIRA-C1-1044✓ CAB-2026-003✓ CI-100002✓ GH-Deploy-5002✓ JIRA-C1-1044-CLOSED Complete
CHG-2026-1045 ✓ JIRA-C1-1045✓ CAB-2026-004✓ CI-100003✓ GH-Deploy-5003✓ JIRA-C1-1045-CLOSED Complete
CHG-2026-1046 ✓ JIRA-C1-1046✓ CAB-2026-005✓ CI-100004✓ GH-Deploy-5004✓ JIRA-C1-1046-CLOSED Complete
CHG-2026-1047 ✓ JIRA-C1-1047✓ CAB-2026-006✓ CI-100005✓ GH-Deploy-5005✓ JIRA-C1-1047-CLOSED Complete
CHG-2026-1048 ✓ JIRA-C1-1048✓ CAB-2026-007✓ CI-100006✓ GH-Deploy-5006✓ JIRA-C1-1048-CLOSED Complete
CHG-2026-1049 ✓ JIRA-C1-1049✓ CAB-2026-008✓ CI-100007✓ GH-Deploy-5007✓ JIRA-C1-1049-CLOSED Complete
CHG-2026-1050 ✓ JIRA-C1-1050✓ CAB-2026-009✓ CI-100008✓ GH-Deploy-5008✓ JIRA-C1-1050-CLOSED Complete
CHG-2026-1051 ✓ JIRA-C1-1051✓ CAB-2026-010✓ CI-100009✓ GH-Deploy-5009✓ JIRA-C1-1051-CLOSED Complete
CHG-2026-1052 ✓ JIRA-C1-1052✓ CAB-2026-011✓ CI-100010✓ GH-Deploy-5010✓ JIRA-C1-1052-CLOSED Complete
CHG-2026-1053 ✓ JIRA-C1-1053✓ CAB-2026-012✓ CI-100011✓ GH-Deploy-5011✓ JIRA-C1-1053-CLOSED Complete
CHG-2026-1054 ✓ JIRA-C1-1054✓ CAB-2026-013✓ CI-100012✓ GH-Deploy-5012✓ JIRA-C1-1054-CLOSED Complete
CHG-2026-1055 ✓ JIRA-C1-1055✓ CAB-2026-014✓ CI-100013✓ GH-Deploy-5013✓ JIRA-C1-1055-CLOSED Complete
CHG-2026-1056 ✓ JIRA-C1-1056✓ CAB-2026-015✓ CI-100014✓ GH-Deploy-5014✓ JIRA-C1-1056-CLOSED Complete
CHG-2026-1057 ✓ JIRA-C1-1057✓ CAB-2026-016✓ CI-100015✓ GH-Deploy-5015✓ JIRA-C1-1057-CLOSED Complete
CHG-2026-1058 ✓ JIRA-C1-1058✓ CAB-2026-017✓ CI-100016✓ GH-Deploy-5016✓ JIRA-C1-1058-CLOSED Complete
CHG-2026-1059 ✓ JIRA-C1-1059? EMERGENCY-BYPASS✓ CI-100017✓ GH-Deploy-5017✓ PIR-2026-0815 Incomplete
CHG-2026-1060 ✓ JIRA-C1-1060✓ CAB-2026-019✓ CI-100018✓ GH-Deploy-5018✓ JIRA-C1-1060-CLOSED Complete
CHG-2026-1061 ✓ JIRA-C1-1061✓ CAB-2026-020✓ CI-100019✓ GH-Deploy-5019✓ JIRA-C1-1061-CLOSED Complete
CHG-2026-1062 ✓ JIRA-C1-1062✓ CAB-2026-021✓ CI-100020✓ GH-Deploy-5020✓ JIRA-C1-1062-CLOSED Complete
CHG-2026-1063 ✓ JIRA-C1-1063✓ CAB-2026-022✓ CI-100021✓ GH-Deploy-5021✓ JIRA-C1-1063-CLOSED Complete
CHG-2026-1064 ✓ JIRA-C1-1064✓ CAB-2026-023✓ CI-100022✓ GH-Deploy-5022✓ JIRA-C1-1064-CLOSED Complete
CHG-2026-1065 ✓ JIRA-C1-1065✓ CAB-2026-024✓ CI-100023✓ GH-Deploy-5023✓ JIRA-C1-1065-CLOSED Complete
CHG-2026-1066 ✓ JIRA-C1-1066✓ CAB-2026-025✓ CI-100024✓ GH-Deploy-5024✓ JIRA-C1-1066-CLOSED Complete
CHG-2026-1067 ✓ JIRA-C1-1067✓ CAB-2026-026✓ CI-100025✓ GH-Deploy-5025✓ JIRA-C1-1067-CLOSED Complete
CHG-2026-1068 ✓ JIRA-C1-1068✓ CAB-2026-027✓ CI-100026✓ GH-Deploy-5026✓ JIRA-C1-1068-CLOSED Complete
CHG-2026-1069 ✓ JIRA-C1-1069✓ CAB-2026-028✓ CI-100027✓ GH-Deploy-5027✓ JIRA-C1-1069-CLOSED Complete
CHG-2026-1070 ✓ JIRA-C1-1070✓ CAB-2026-029✓ CI-100028✓ GH-Deploy-5028✓ JIRA-C1-1070-CLOSED Complete
CHG-2026-1071 ✓ JIRA-C1-1071✓ CAB-2026-030✓ CI-100029✓ GH-Deploy-5029✓ JIRA-C1-1071-CLOSED Complete
CHG-2026-1072 ✓ JIRA-C1-1072✓ CAB-2026-031✓ CI-100030✓ GH-Deploy-5030✓ JIRA-C1-1072-CLOSED Complete
CHG-2026-1073 ✓ JIRA-C1-1073✓ CAB-2026-032✓ CI-100031✓ GH-Deploy-5031✓ JIRA-C1-1073-CLOSED Complete
CHG-2026-1074 ✓ JIRA-C1-1074✓ CAB-2026-033✓ CI-100032✓ GH-Deploy-5032✓ JIRA-C1-1074-CLOSED Complete
CHG-2026-1075 ✓ JIRA-C1-1075✓ CAB-2026-034✓ CI-100033✓ GH-Deploy-5033✓ JIRA-C1-1075-CLOSED Complete
CHG-2026-1076 ✓ JIRA-C1-1076✓ CAB-2026-035✓ CI-100034✓ GH-Deploy-5034✓ JIRA-C1-1076-CLOSED Complete
CHG-2026-1077 ✓ JIRA-C1-1077✓ CAB-2026-036✓ CI-100035✓ GH-Deploy-5035✓ JIRA-C1-1077-CLOSED Complete
CHG-2026-1078 ✓ JIRA-C1-1078✓ CAB-2026-037✓ CI-100036✓ GH-Deploy-5036✓ JIRA-C1-1078-CLOSED Complete
CHG-2026-1079 ✓ JIRA-C1-1079✓ CAB-2026-038✓ CI-100037✓ GH-Deploy-5037✓ JIRA-C1-1079-CLOSED Complete
CHG-2026-1080 ✓ JIRA-C1-1080✓ CAB-2026-039✓ CI-100038✓ GH-Deploy-5038✓ JIRA-C1-1080-CLOSED Complete
CHG-2026-1081 ✓ JIRA-C1-1081✓ CAB-2026-040✓ CI-100039✓ GH-Deploy-5039✓ JIRA-C1-1081-CLOSED Complete
CHG-2026-1082 ✓ JIRA-C1-1082✓ CAB-2026-041✓ CI-100040✓ GH-Deploy-5040✓ JIRA-C1-1082-CLOSED Complete
CHG-2026-1083 ✓ JIRA-C1-1083✓ CAB-2026-042✓ CI-100041✓ GH-Deploy-5041✓ JIRA-C1-1083-CLOSED Complete
CHG-2026-1084 ✓ JIRA-C1-1084✓ CAB-2026-043✓ CI-100042✓ GH-Deploy-5042✓ JIRA-C1-1084-CLOSED Complete
CHG-2026-1085 ✓ JIRA-C1-1085✓ CAB-2026-044✓ CI-100043✓ GH-Deploy-5043✓ JIRA-C1-1085-CLOSED Complete
CHG-2026-1086 ✓ JIRA-C1-1086✓ CAB-2026-045✓ CI-100044✓ GH-Deploy-5044✓ JIRA-C1-1086-CLOSED Complete
CHG-2026-1087 ✓ JIRA-C1-1087✓ CAB-2026-046✓ CI-100045✓ GH-Deploy-5045✓ JIRA-C1-1087-CLOSED Complete
CHG-2026-1088 ✓ JIRA-C1-1088✓ CAB-2026-047✓ CI-100046✓ GH-Deploy-5046✓ JIRA-C1-1088-CLOSED Complete
CHG-2026-1089 ✓ JIRA-C1-1089✓ CAB-2026-048✓ CI-100047✓ GH-Deploy-5047✓ JIRA-C1-1089-CLOSED Complete
CHG-2026-1090 ✓ JIRA-C1-1090✓ CAB-2026-049✓ CI-100048✓ GH-Deploy-5048✓ JIRA-C1-1090-CLOSED Complete
CHG-2026-1091 ✓ JIRA-C1-1091✓ CAB-2026-050✓ CI-100049✓ GH-Deploy-5049✓ JIRA-C1-1091-CLOSED Complete
CHG-2026-1092 ✓ JIRA-C1-1092✓ CAB-2026-051✓ CI-100050✓ GH-Deploy-5050✓ JIRA-C1-1092-CLOSED Complete
CHG-2026-1093 ✓ JIRA-C1-1093✓ CAB-2026-052✓ CI-100051✓ GH-Deploy-5051✓ JIRA-C1-1093-CLOSED Complete
CHG-2026-1094 ✓ JIRA-C1-1094✓ CAB-2026-053✓ CI-100052✓ GH-Deploy-5052✓ JIRA-C1-1094-CLOSED Complete
CHG-2026-1095 ✓ JIRA-C1-1095✓ CAB-2026-054✓ CI-100053✓ GH-Deploy-5053✓ JIRA-C1-1095-CLOSED Complete
CHG-2026-1096 ✓ JIRA-C1-1096✓ CAB-2026-055✓ CI-100054✓ GH-Deploy-5054✓ JIRA-C1-1096-CLOSED Complete
CHG-2026-1097 ✓ JIRA-C1-1097✓ CAB-2026-056✓ CI-100055✓ GH-Deploy-5055✓ JIRA-C1-1097-CLOSED Complete
CHG-2026-1098 ✓ JIRA-C1-1098✓ CAB-2026-057✓ CI-100056✓ GH-Deploy-5056✓ JIRA-C1-1098-CLOSED Complete
CHG-2026-1099 ✓ JIRA-C1-1099✓ CAB-2026-058✓ CI-100057✓ GH-Deploy-5057✓ JIRA-C1-1099-CLOSED Complete
CHG-2026-1100 ✓ JIRA-C1-1100✓ CAB-2026-059✓ CI-100058✓ GH-Deploy-5058✓ JIRA-C1-1100-CLOSED Complete
CHG-2026-1101 ✓ JIRA-C1-1101✓ CAB-2026-060✓ CI-100059✓ GH-Deploy-5059✓ JIRA-C1-1101-CLOSED Complete
CHG-2026-1102 ✓ JIRA-C1-1102✓ CAB-2026-061✓ CI-100060✓ GH-Deploy-5060✓ JIRA-C1-1102-CLOSED Complete
CHG-2026-1103 ✓ JIRA-C1-1103✓ CAB-2026-062✓ CI-100061✓ GH-Deploy-5061✓ JIRA-C1-1103-CLOSED Complete
CHG-2026-1104 ✓ JIRA-C1-1104✓ CAB-2026-063✓ CI-100062✓ GH-Deploy-5062✓ JIRA-C1-1104-CLOSED Complete
CHG-2026-1105 ✓ JIRA-C1-1105✓ CAB-2026-064✓ CI-100063✓ GH-Deploy-5063✓ JIRA-C1-1105-CLOSED Complete
CHG-2026-1106 ✓ JIRA-C1-1106✓ CAB-2026-065✓ CI-100064✓ GH-Deploy-5064✓ JIRA-C1-1106-CLOSED Complete
CHG-2026-1107 ✓ JIRA-C1-1107✓ CAB-2026-066✓ CI-100065✓ GH-Deploy-5065✓ JIRA-C1-1107-CLOSED Complete
CHG-2026-1108 ✓ JIRA-C1-1108✓ CAB-2026-067✓ CI-100066✓ GH-Deploy-5066✓ JIRA-C1-1108-CLOSED Complete
CHG-2026-1109 ✓ JIRA-C1-1109✓ CAB-2026-068✓ CI-100067✓ GH-Deploy-5067✓ JIRA-C1-1109-CLOSED Complete
CHG-2026-1110 ✓ JIRA-C1-1110✓ CAB-2026-069✓ CI-100068✓ GH-Deploy-5068✓ JIRA-C1-1110-CLOSED Complete
CHG-2026-1111 ✓ JIRA-C1-1111✓ CAB-2026-070✓ CI-100069✓ GH-Deploy-5069✓ JIRA-C1-1111-CLOSED Complete
CHG-2026-1112 ✓ JIRA-C1-1112✓ CAB-2026-071✓ CI-100070✓ GH-Deploy-5070✓ JIRA-C1-1112-CLOSED Complete
CHG-2026-1113 ✓ JIRA-C1-1113✓ CAB-2026-072✓ CI-100071✓ GH-Deploy-5071✓ JIRA-C1-1113-CLOSED Complete
CHG-2026-1114 ✓ JIRA-C1-1114✓ CAB-2026-073✓ CI-100072✓ GH-Deploy-5072✓ JIRA-C1-1114-CLOSED Complete
CHG-2026-1115 ✓ JIRA-C1-1115✓ CAB-2026-074✓ CI-100073✓ GH-Deploy-5073✓ JIRA-C1-1115-CLOSED Complete
CHG-2026-1116 ✓ JIRA-C1-1116✓ CAB-2026-075✓ CI-100074✓ GH-Deploy-5074✓ JIRA-C1-1116-CLOSED Complete
CHG-2026-1117 ✓ JIRA-C1-1117✓ CAB-2026-076✓ CI-100075✓ GH-Deploy-5075✓ JIRA-C1-1117-CLOSED Complete
CHG-2026-1118 ✓ JIRA-C1-1118✓ CAB-2026-077✓ CI-100076✓ GH-Deploy-5076✓ JIRA-C1-1118-CLOSED Complete
CHG-2026-1119 ✓ JIRA-C1-1119✓ CAB-2026-078✓ CI-100077✓ GH-Deploy-5077✓ JIRA-C1-1119-CLOSED Complete
CHG-2026-1120 ✓ JIRA-C1-1120✓ CAB-2026-079✓ CI-100078✓ GH-Deploy-5078✓ JIRA-C1-1120-CLOSED Complete
CHG-2026-1121 ✓ JIRA-C1-1121✓ CAB-2026-080✓ CI-100079✓ GH-Deploy-5079✓ JIRA-C1-1121-CLOSED Complete
CHG-2026-1122 ✓ JIRA-C1-1122✓ CAB-2026-081✓ CI-100080✓ GH-Deploy-5080✓ JIRA-C1-1122-CLOSED Complete
CHG-2026-1123 ✓ JIRA-C1-1123✓ CAB-2026-082✓ CI-100081✓ GH-Deploy-5081✓ JIRA-C1-1123-CLOSED Complete
CHG-2026-1124 ✓ JIRA-C1-1124✓ CAB-2026-083✓ CI-100082✓ GH-Deploy-5082✓ JIRA-C1-1124-CLOSED Complete
CHG-2026-1125 ✓ JIRA-C1-1125✓ CAB-2026-084✓ CI-100083✓ GH-Deploy-5083✓ JIRA-C1-1125-CLOSED Complete
CHG-2026-1126 ✓ JIRA-C1-1126✓ CAB-2026-085✓ CI-100084✓ GH-Deploy-5084✓ JIRA-C1-1126-CLOSED Complete
CHG-2026-1127 ✓ JIRA-C1-1127✓ CAB-2026-086✓ CI-100085✓ GH-Deploy-5085✓ JIRA-C1-1127-CLOSED Complete
CHG-2026-1128 ✓ JIRA-C1-1128✓ CAB-2026-087✓ CI-100086✓ GH-Deploy-5086✓ JIRA-C1-1128-CLOSED Complete
CHG-2026-1129 ✓ JIRA-C1-1129✓ CAB-2026-088✓ CI-100087✓ GH-Deploy-5087✓ JIRA-C1-1129-CLOSED Complete
CHG-2026-1130 ✓ JIRA-C1-1130✓ CAB-2026-089✓ CI-100088✓ GH-Deploy-5088✓ JIRA-C1-1130-CLOSED Complete
CHG-2026-1131 ✓ JIRA-C1-1131✓ CAB-2026-090✓ CI-100089✓ GH-Deploy-5089✓ JIRA-C1-1131-CLOSED Complete
CHG-2026-1132 ✓ JIRA-C1-1132✓ CAB-2026-091✓ CI-100090✓ GH-Deploy-5090✓ JIRA-C1-1132-CLOSED Complete
CHG-2026-1133 ✓ JIRA-C1-1133✓ CAB-2026-092✓ CI-100091✓ GH-Deploy-5091✓ JIRA-C1-1133-CLOSED Complete
CHG-2026-1134 ✓ JIRA-C1-1134✓ CAB-2026-093✓ CI-100092✓ GH-Deploy-5092✓ JIRA-C1-1134-CLOSED Complete
CHG-2026-1135 ✓ JIRA-C1-1135✓ CAB-2026-094✓ CI-100093✓ GH-Deploy-5093✓ JIRA-C1-1135-CLOSED Complete
CHG-2026-1136 ✓ JIRA-C1-1136✓ CAB-2026-095✓ CI-100094✓ GH-Deploy-5094✓ JIRA-C1-1136-CLOSED Complete
CHG-2026-1137 ✓ JIRA-C1-1137✓ CAB-2026-096✓ CI-100095✓ GH-Deploy-5095✓ JIRA-C1-1137-CLOSED Complete
CHG-2026-1138 ✓ JIRA-C1-1138✓ CAB-2026-097✓ CI-100096✓ GH-Deploy-5096✓ JIRA-C1-1138-CLOSED Complete
CHG-2026-1139 ✓ JIRA-C1-1139✓ CAB-2026-098✓ CI-100097✓ GH-Deploy-5097✓ JIRA-C1-1139-CLOSED Complete
CHG-2026-1140 ✓ JIRA-C1-1140✓ CAB-2026-099✓ CI-100098✓ GH-Deploy-5098✓ JIRA-C1-1140-CLOSED Complete
CHG-2026-1141 ✓ JIRA-C1-1141✓ CAB-2026-100✓ CI-100099✓ GH-Deploy-5099✓ JIRA-C1-1141-CLOSED Complete
C3 Release Controls
Effective
Sample Release Notes RefVersion TagRollback PlanArtifact HashRelease Record Status
GH-RLS-v2.0.0 ✓ RLS-NOTES-v2.0.0✓ v2.0.0✓ RLS-RB-v2.0.0✓ 8b9bf9a69b73✓ GH-REL-v2.0.0 Complete
GH-RLS-v2.1.0 ✓ RLS-NOTES-v2.1.0✓ v2.1.0✓ RLS-RB-v2.1.0✓ e393ee168063✓ GH-REL-v2.1.0 Complete
GH-RLS-v2.2.0 ✓ RLS-NOTES-v2.2.0✓ v2.2.0✓ RLS-RB-v2.2.0✓ d5015256adb5✓ GH-REL-v2.2.0 Complete
GH-RLS-v2.3.0 ✓ RLS-NOTES-v2.3.0✓ v2.3.0✓ RLS-RB-v2.3.0✓ 1664af23e6f8✓ GH-REL-v2.3.0 Complete
GH-RLS-v3.0.0 ✓ RLS-NOTES-v3.0.0✓ v3.0.0✓ RLS-RB-v3.0.0✓ 10681ba8dcd5✓ GH-REL-v3.0.0 Complete
GH-RLS-v3.1.0 ✓ RLS-NOTES-v3.1.0✓ v3.1.0✓ RLS-RB-v3.1.0✓ 70fe522a3973✓ GH-REL-v3.1.0 Complete
GH-RLS-v3.2.0 ✓ RLS-NOTES-v3.2.0✓ v3.2.0✓ RLS-RB-v3.2.0✓ 715efcb6718e✓ GH-REL-v3.2.0 Complete
GH-RLS-v3.3.0 ✓ RLS-NOTES-v3.3.0✓ v3.3.0✓ RLS-RB-v3.3.0✓ 0fb90de0e5e9✓ GH-REL-v3.3.0 Complete
GH-RLS-v4.0.0 ✓ RLS-NOTES-v4.0.0✓ v4.0.0✓ RLS-RB-v4.0.0✓ 9f83e627f808✓ GH-REL-v4.0.0 Complete
GH-RLS-v4.1.0 ✓ RLS-NOTES-v4.1.0✓ v4.1.0✓ RLS-RB-v4.1.0✓ d24eac747937✓ GH-REL-v4.1.0 Complete
GH-RLS-v4.2.0 ✓ RLS-NOTES-v4.2.0✓ v4.2.0✓ RLS-RB-v4.2.0✓ 88477b3a70ab✓ GH-REL-v4.2.0 Complete
GH-RLS-v4.3.0 ✓ RLS-NOTES-v4.3.0✓ v4.3.0✓ RLS-RB-v4.3.0✓ ccbb4b3c2961✓ GH-REL-v4.3.0 Complete
GH-RLS-v5.0.0 ✓ RLS-NOTES-v5.0.0✓ v5.0.0✓ RLS-RB-v5.0.0✓ 2faeb1494b2a✓ GH-REL-v5.0.0 Complete
GH-RLS-v5.1.0 ✓ RLS-NOTES-v5.1.0✓ v5.1.0✓ RLS-RB-v5.1.0✓ f2811f93ae7a✓ GH-REL-v5.1.0 Complete
GH-RLS-v5.2.0 ✓ RLS-NOTES-v5.2.0✓ v5.2.0✓ RLS-RB-v5.2.0✓ 0a1482f1361b✓ GH-REL-v5.2.0 Complete
GH-RLS-v5.3.0 ✓ RLS-NOTES-v5.3.0✓ v5.3.0✓ RLS-RB-v5.3.0✓ 41f75bdfb3a1✓ GH-REL-v5.3.0 Complete
GH-RLS-v6.0.0 ✓ RLS-NOTES-v6.0.0✓ v6.0.0✓ RLS-RB-v6.0.0✓ 7baede8b7d38✓ GH-REL-v6.0.0 Complete
GH-RLS-v6.1.0 ✓ RLS-NOTES-v6.1.0✓ v6.1.0✓ RLS-RB-v6.1.0✓ 472e5a9d3e35✓ GH-REL-v6.1.0 Complete
GH-RLS-v6.2.0 ✓ RLS-NOTES-v6.2.0✓ v6.2.0✓ RLS-RB-v6.2.0✓ 58222ab953a8✓ GH-REL-v6.2.0 Complete
GH-RLS-v6.3.0 ✓ RLS-NOTES-v6.3.0✓ v6.3.0✓ RLS-RB-v6.3.0✓ b69db7909c17✓ GH-REL-v6.3.0 Complete
GH-RLS-v7.0.0 ✓ RLS-NOTES-v7.0.0✓ v7.0.0✓ RLS-RB-v7.0.0✓ 377ce75b88de✓ GH-REL-v7.0.0 Complete
GH-RLS-v7.1.0 ✓ RLS-NOTES-v7.1.0✓ v7.1.0✓ RLS-RB-v7.1.0✓ 9c98969fab2e✓ GH-REL-v7.1.0 Complete
GH-RLS-v7.2.0 ✓ RLS-NOTES-v7.2.0✓ v7.2.0✓ RLS-RB-v7.2.0✓ 8ed1b97f1e1b✓ GH-REL-v7.2.0 Complete
GH-RLS-v7.3.0 ✓ RLS-NOTES-v7.3.0✓ v7.3.0✓ RLS-RB-v7.3.0✓ 293a44586e57✓ GH-REL-v7.3.0 Complete
GH-RLS-v8.0.0 ✓ RLS-NOTES-v8.0.0✓ v8.0.0✓ RLS-RB-v8.0.0✓ 108a68941756✓ GH-REL-v8.0.0 Complete
GH-RLS-v8.1.0 ✓ RLS-NOTES-v8.1.0✓ v8.1.0✓ RLS-RB-v8.1.0✓ 5c074745c80a✓ GH-REL-v8.1.0 Complete
GH-RLS-v8.2.0 ✓ RLS-NOTES-v8.2.0✓ v8.2.0✓ RLS-RB-v8.2.0✓ 9c1d2032e633✓ GH-REL-v8.2.0 Complete
GH-RLS-v8.3.0 ✓ RLS-NOTES-v8.3.0✓ v8.3.0✓ RLS-RB-v8.3.0✓ ac5c68165cc2✓ GH-REL-v8.3.0 Complete
GH-RLS-v9.0.0 ✓ RLS-NOTES-v9.0.0✓ v9.0.0✓ RLS-RB-v9.0.0✓ d18a3c18b06b✓ GH-REL-v9.0.0 Complete
GH-RLS-v9.1.0 ✓ RLS-NOTES-v9.1.0✓ v9.1.0✓ RLS-RB-v9.1.0✓ f155fa29f0a8✓ GH-REL-v9.1.0 Complete
GH-RLS-v9.2.0 ✓ RLS-NOTES-v9.2.0✓ v9.2.0✓ RLS-RB-v9.2.0✓ 4a473027e301✓ GH-REL-v9.2.0 Complete
GH-RLS-v9.3.0 ✓ RLS-NOTES-v9.3.0✓ v9.3.0✓ RLS-RB-v9.3.0✓ 456ef26d38ae✓ GH-REL-v9.3.0 Complete
GH-RLS-v10.0.0 ✓ RLS-NOTES-v10.0.0✓ v10.0.0✓ RLS-RB-v10.0.0✓ 2876a681b302✓ GH-REL-v10.0.0 Complete
GH-RLS-v10.1.0 ✓ RLS-NOTES-v10.1.0✓ v10.1.0✓ RLS-RB-v10.1.0✓ c5f804a14dad✓ GH-REL-v10.1.0 Complete
GH-RLS-v10.2.0 ✓ RLS-NOTES-v10.2.0✓ v10.2.0✓ RLS-RB-v10.2.0✓ ef71168be841✓ GH-REL-v10.2.0 Complete
GH-RLS-v10.3.0 ✓ RLS-NOTES-v10.3.0✓ v10.3.0✓ RLS-RB-v10.3.0✓ 3dd25d55f1f0✓ GH-REL-v10.3.0 Complete
GH-RLS-v11.0.0 ✓ RLS-NOTES-v11.0.0✓ v11.0.0✓ RLS-RB-v11.0.0✓ cc490b8394c9✓ GH-REL-v11.0.0 Complete
GH-RLS-v11.1.0 ✓ RLS-NOTES-v11.1.0✓ v11.1.0✓ RLS-RB-v11.1.0✓ b64c77770322✓ GH-REL-v11.1.0 Complete
GH-RLS-v11.2.0 ✓ RLS-NOTES-v11.2.0✓ v11.2.0✓ RLS-RB-v11.2.0✓ 3ae093620e17✓ GH-REL-v11.2.0 Complete
GH-RLS-v11.3.0 ✓ RLS-NOTES-v11.3.0✓ v11.3.0✓ RLS-RB-v11.3.0✓ 9ea8ee127a3c✓ GH-REL-v11.3.0 Complete
GH-RLS-v12.0.0 ✓ RLS-NOTES-v12.0.0✓ v12.0.0✓ RLS-RB-v12.0.0✓ 1e01ae3af063✓ GH-REL-v12.0.0 Complete
GH-RLS-v12.1.0 ✓ RLS-NOTES-v12.1.0✓ v12.1.0✓ RLS-RB-v12.1.0✓ c63e231da2c1✓ GH-REL-v12.1.0 Complete
GH-RLS-v12.2.0 ✓ RLS-NOTES-v12.2.0✓ v12.2.0✓ RLS-RB-v12.2.0✓ 2f592a01ee15✓ GH-REL-v12.2.0 Complete
GH-RLS-v12.3.0 ✓ RLS-NOTES-v12.3.0✓ v12.3.0✓ RLS-RB-v12.3.0✓ 2b7127a67fde✓ GH-REL-v12.3.0 Complete
GH-RLS-v13.0.0 ✓ RLS-NOTES-v13.0.0✓ v13.0.0✓ RLS-RB-v13.0.0✓ 6fe2d620bc57✓ GH-REL-v13.0.0 Complete
GH-RLS-v13.1.0 ✓ RLS-NOTES-v13.1.0✓ v13.1.0✓ RLS-RB-v13.1.0✓ caecbcbde202✓ GH-REL-v13.1.0 Complete
GH-RLS-v13.2.0 ✓ RLS-NOTES-v13.2.0✓ v13.2.0✓ RLS-RB-v13.2.0✓ 0206edfa6a5a✓ GH-REL-v13.2.0 Complete
GH-RLS-v13.3.0 ✓ RLS-NOTES-v13.3.0✓ v13.3.0✓ RLS-RB-v13.3.0✓ 7829545c2585✓ GH-REL-v13.3.0 Complete
GH-RLS-v14.0.0 ✓ RLS-NOTES-v14.0.0✓ v14.0.0✓ RLS-RB-v14.0.0✓ 04a4dbf9d0c6✓ GH-REL-v14.0.0 Complete
GH-RLS-v14.1.0 ✓ RLS-NOTES-v14.1.0✓ v14.1.0✓ RLS-RB-v14.1.0✓ 2efbd7b01d89✓ GH-REL-v14.1.0 Complete
GH-RLS-v14.2.0 ✓ RLS-NOTES-v14.2.0✓ v14.2.0✓ RLS-RB-v14.2.0✓ 69438663d8f0✓ GH-REL-v14.2.0 Complete
GH-RLS-v14.3.0 ✓ RLS-NOTES-v14.3.0✓ v14.3.0✓ RLS-RB-v14.3.0✓ 88c37040dd3e✓ GH-REL-v14.3.0 Complete
GH-RLS-v15.0.0 ✓ RLS-NOTES-v15.0.0✓ v15.0.0✓ RLS-RB-v15.0.0✓ f229c51f51f4✓ GH-REL-v15.0.0 Complete
GH-RLS-v15.1.0 ✓ RLS-NOTES-v15.1.0✓ v15.1.0✓ RLS-RB-v15.1.0✓ 4b90faadcd3b✓ GH-REL-v15.1.0 Complete
GH-RLS-v15.2.0 ✓ RLS-NOTES-v15.2.0✓ v15.2.0✓ RLS-RB-v15.2.0✓ 5f958f366180✓ GH-REL-v15.2.0 Complete
GH-RLS-v15.3.0 ✓ RLS-NOTES-v15.3.0✓ v15.3.0✓ RLS-RB-v15.3.0✓ 30673c390505✓ GH-REL-v15.3.0 Complete
GH-RLS-v16.0.0 ✓ RLS-NOTES-v16.0.0✓ v16.0.0✓ RLS-RB-v16.0.0✓ 714d49ce10d3✓ GH-REL-v16.0.0 Complete
GH-RLS-v16.1.0 ✓ RLS-NOTES-v16.1.0✓ v16.1.0✓ RLS-RB-v16.1.0✓ 2fc019861885✓ GH-REL-v16.1.0 Complete
Note: The traceability chain ensures each sampled change has documented evidence of: (1) Ticket creation, (2) Approval, (3) Testing, (4) Deployment, and (5) Closure.
Exception Summary 9
AICPA AU-C 265 — Communicating Internal Control Related Matters • See §7 Testing Results
4
Total
0
Open
0
Critical
0
High
By category: access: 2, change: 1, operations: 1.
Control Sample ID Title Severity Status Root Cause Remediation Timeline
A1OKTA-PROV-2026-0149Joiner-SLA miss — manager on PTO, no backup approver configured
Sample OKTA-PROV-2026-0149 (Okta provisioning ticket TKT-10312): the requesting manager's approval was recorded in Okta on 2026-02-28 — o…
LowRemediatedThe hiring manager was on scheduled PTO during the 5-day pre-hire window. The Okta access-request workflow did not have a backup-approver configured for this manager's approval chain, so the request queued in the approver's inbox until return-from-PTO. Audit team confirmed via Okta audit log + PTO calendar export that no backup escalation rule fired.Engineering Operations configured a default backup-approver on every Okta access-request approval chain (the requesting manager's skip-level manager, falling back to the team's engineering director). Backup-approver fires automatically after 24 hours without primary-approver action. Deployed 2026-03-15 via Okta admin console change; verified end-to-end against synthetic test request on 2026-03-16.Raised: 28 Feb 2026
Remediated: 15 Mar 2026
Closed: 20 Mar 2026
A1OKTA-PROV-2026-0163Joiner-SLA miss — same root cause, occurred before remediation effective date
Sample OKTA-PROV-2026-0163 (Okta provisioning ticket TKT-10581): the requesting manager's approval was recorded in Okta on 2026-03-08 — t…
LowRemediatedSame root cause as TKT-10312 — the Okta access-request workflow's missing backup-approver configuration. The remediation for TKT-10312 was in active design between 2026-02-28 and the 2026-03-15 effective date; this second occurrence fell inside the remediation-design window before the production configuration change was deployed.Same remediation as TKT-10312 — default backup-approver on every Okta access-request approval chain, deployed 2026-03-15. This ticket closed automatically once the backup-approver configuration went into effect; no separate remediation work required. Audit team verified no further occurrences in the remaining 9.5 months of the audit period.Raised: 8 Mar 2026
Remediated: 15 Mar 2026
Closed: 20 Mar 2026
C1CHG-2026-1059Emergency-change carve-out invoked — pre-deployment CAB approval bypassed
Sample CHG-2026-1059 (Jira change ticket; Sev-1 emergency response): a Sev-1 payment-processing latency incident was detected by Datadog…
MediumAcceptedPre-deployment CAB approval was bypassed on 14 August 2026 because the standard CAB-approval lead time of 4 business hours would have extended customer-facing payment-processing degradation beyond the acceptable risk threshold during the active Sev-1 incident. The audit team verified non-feasibility was determined under the Change Management Policy v4.1 §5.4 emergency-change carve-out, which authorizes Sev-1 emergency bypass conditional on a 24-hour PIR and next-CAB ratification — both confirmed in evidence (PIR-2026-0815 filed 15 August 2026 + CAB minutes 2026-08-21).No corrective remediation required — the change followed the policy-compliant emergency-change path. The PIR documented two preventive actions: (1) updated the payment-gateway service's load-shedding configuration to fail-fast rather than queue under sustained latency, deployed 18 August 2026; (2) added a runbook entry for the latency pattern to the on-call playbook. Audit team confirmed via Datadog that the latency pattern did not recur in the remaining 4.5 months of the audit period.Raised: 14 Aug 2026
Closed: 21 Aug 2026
O4INC-2026-0922Alert-latency deficiency — Q3 monitoring refactor through Oct 5 remediation (~82 days)
Sample INC-2026-0922 (PagerDuty incident; Sev-3 latency spike): a Sev-3 latency spike on 18 September 2026 surfaced the alert-latency def…
MediumRemediatedThe Q3 2026 monitoring-rule refactor (PR #4187, deployed 2026-07-15) consolidated 47 monitor definitions and changed the aggregation-window value from a per-monitor parameter to a shared default. The shared-default value was tuned for the high-volume monitor class but lengthened the effective aggregation window for the low-volume Sev-3 monitor class — extending the time between threshold breach and alert firing. The refactor pre-merge testing did not include a synthetic alert-latency probe at the time of the change; the alert-latency regression therefore was not caught in monitoring-rule QA prior to deploy.PR #4521 (deployed 5 October 2026) introduced two compensating mechanisms: (1) a synthetic alert-latency probe added to the CI pipeline that simulates threshold breach for each monitor class and fails the build if alert-latency exceeds the documented SLA; (2) backfilled alert-latency probes against all 247 critical-class monitors with the corrected aggregation-window default per monitor class. Audit team verified post-remediation behavior on 14 of 14 incidents in the October-December sub-period and confirmed alert latency within SLA. Pre-merge CI gate prevents recurrence of the same regression pattern.Raised: 18 Sep 2026
Remediated: 5 Oct 2026
Closed: 8 Oct 2026
Quality Review Summary 10
AICPA QM 10 — A Firm’s System of Quality Management
48
Quality Review
100%
QR Pass Rate
1624
Data Integrity
1620
DI Passed
4
DI Failed
0
DI Warning
99.8%
DI Pass Rate
4
Acknowledged
0
Disputed

Quality Review = control-level work-product checks (~6 per control). Data Integrity = per-sample checks. Pass rates exclude N/A checks from the denominator.

Control QR QR Pass Data Integrity DI Pass DI Pass Rate
A1 6 6 300 298 99.3%
A6 6 6 90 90 100.0%
A9 6 6 174 174 100.0%
C1 6 6 300 299 99.7%
C3 6 6 174 174 100.0%
O1 6 6 200 200 100.0%
O4 6 6 116 115 99.1%
S3 6 6 270 270 100.0%

10b. Data Integrity Findings

Control Check Type Check Name Severity Result Acknowledgment
A1date_sequenceApproval After GrantHighFail✓ Acknowledged: Manager approval recorded after the hire-date SLA; deviation documented as an exception with in-period remediation (default backup-approver configured on every Okta approval chain).
14 Mar 2027, 14:22 UTC
A1date_sequenceApproval After GrantHighFail✓ Acknowledged: Manager approval recorded after the hire-date SLA; deviation documented as an exception with in-period remediation (default backup-approver configured on every Okta approval chain).
13 Mar 2027, 14:22 UTC
C1missing_approvalMissing ApprovalHighFail✓ Acknowledged: Standard pre-deployment CAB authorization bypassed under the Sev-1 emergency-change carve-out (policy §5.4); 24-hour PIR + next-CAB ratification verified in evidence.
30 Mar 2027, 10:15 UTC
O4missing_activityMissing ActivityHighFail✓ Acknowledged: Monitoring-rule configuration drift detected during the period; remediation tracked and closed within the audit period.
24 Mar 2027, 10:30 UTC
Audit Trail 11
AICPA AU-C 230 — Audit Documentation
Engagement Finalized
Sarah Kim, CPA
Status
review → finalized
10 Apr 2027, 18:00 UTC
Control Signed Off
Sarah Kim, CPA
Control
C3
5 Apr 2027, 11:00 UTC
Quality Review Checks Executed
Sarah Kim, CPA
Rules
1672
Passed
1668
5 Apr 2027, 08:00 UTC
Control Signed Off
Sarah Kim, CPA
Control
C1
2 Apr 2027, 10:15 UTC
Control Signed Off
Sarah Kim, CPA
Control
S3
30 Mar 2027, 13:00 UTC
Control Signed Off
Sarah Kim, CPA
Control
O4
28 Mar 2027, 10:30 UTC
Control Signed Off
Sarah Kim, CPA
Control
O1
25 Mar 2027, 09:00 UTC
Control Signed Off
Sarah Kim, CPA
Control
A9
20 Mar 2027, 15:00 UTC
Evidence Uploaded
Sarah Kim, CPA
File Name
vuln-mgmt-sla-policy-v2.1.pdf
File Hash
311d5d37…d1bd9...
File Size
229.1 KB
19 Mar 2027, 10:00 UTC
Control Signed Off
Sarah Kim, CPA
Control
A6
18 Mar 2027, 14:30 UTC
Control Signed Off
Sarah Kim, CPA
Control
A1
15 Mar 2027, 14:22 UTC
Evidence Uploaded
Sarah Kim, CPA
File Name
snyk-remediation-tracker-fy2026.xlsx
File Hash
ec1c7599…3f6ea...
File Size
663.0 KB
12 Mar 2027, 10:00 UTC
Evidence Uploaded
Sarah Kim, CPA
File Name
wiz-vulnerability-export-fy2026.csv
File Hash
b77d8409…b2b33...
File Size
869.3 KB
5 Mar 2027, 10:00 UTC
Evidence Uploaded
Sarah Kim, CPA
File Name
monitoring-rule-config-snapshots.pdf
File Hash
2dd69a35…14e78...
File Size
1.5 MB
26 Feb 2027, 10:00 UTC
Evidence Uploaded
Sarah Kim, CPA
File Name
pagerduty-incidents-fy2026.csv
File Hash
2cd1c07a…71d42...
File Size
337.6 KB
19 Feb 2027, 10:00 UTC
Evidence Uploaded
Sarah Kim, CPA
File Name
datadog-alerts-fy2026.csv
File Hash
ef70248d…ac91b...
File Size
229.1 KB
12 Feb 2027, 10:00 UTC
Evidence Uploaded
Sarah Kim, CPA
File Name
rds-snapshot-integrity-verification.xlsx
File Hash
63cd631b…66e7d...
File Size
446.1 KB
5 Feb 2027, 10:00 UTC
Evidence Uploaded
Sarah Kim, CPA
File Name
dr-drill-october-2026-report.pdf
File Hash
10a5ccdb…d391a...
File Size
3.3 MB
29 Jan 2027, 10:00 UTC
Evidence Uploaded
Sarah Kim, CPA
File Name
aws-backup-completion-logs-fy2026.csv
File Hash
1ef8adfe…cf2cf...
File Size
663.0 KB
22 Jan 2027, 10:00 UTC
Evidence Uploaded
Sarah Kim, CPA
File Name
release-notes-archive-q1-q4.pdf
File Hash
0111ff44…f1ca2...
File Size
4.4 MB
15 Jan 2027, 10:00 UTC
Evidence Uploaded
Sarah Kim, CPA
File Name
github-releases-tagged-fy2026.csv
File Hash
38d9af24…bbf61...
File Size
120.6 KB
8 Jan 2027, 10:00 UTC
Evidence Uploaded
Sarah Kim, CPA
File Name
post-implementation-review-records.xlsx
File Hash
608f2ceb…8ef0b...
File Size
229.1 KB
30 Nov 2026, 10:00 UTC
Evidence Uploaded
Sarah Kim, CPA
File Name
emergency-change-policy-v3.2.pdf
File Hash
5abea689…9b0af...
File Size
337.6 KB
23 Nov 2026, 10:00 UTC
Evidence Uploaded
Sarah Kim, CPA
File Name
github-pr-merge-records-fy2026.csv
File Hash
805ec565…63425...
File Size
770.5 KB
16 Nov 2026, 10:00 UTC
Evidence Uploaded
Sarah Kim, CPA
File Name
jira-change-tickets-fy2026.csv
File Hash
4dd7e778…81cef...
File Size
554.6 KB
9 Nov 2026, 10:00 UTC
Evidence Uploaded
Sarah Kim, CPA
File Name
iam-quarterly-review-attestations.pdf
File Hash
5799a894…de0f9...
File Size
964.5 KB
2 Nov 2026, 10:00 UTC
Evidence Uploaded
Sarah Kim, CPA
File Name
aws-iam-policy-review-q1-q4.csv
File Hash
4a96074a…1f2ee...
File Size
153.1 KB
21 Oct 2026, 10:00 UTC
Evidence Uploaded
Sarah Kim, CPA
File Name
removed-access-evidence-pack.pdf
File Hash
737730ec…21c33...
File Size
1.2 MB
12 Oct 2026, 10:00 UTC
Evidence Uploaded
Sarah Kim, CPA
File Name
okta-uar-q1-q4-completions.csv
File Hash
07d0f6c7…b603d...
File Size
96.5 KB
3 Oct 2026, 10:00 UTC
Evidence Uploaded
Sarah Kim, CPA
File Name
manager-approval-screenshots-sample-pack.pdf
File Hash
c068cbea…0dad3...
File Size
2.3 MB
22 Sep 2026, 10:00 UTC
Exception Raised
Sarah Kim, CPA
Title
Alert-latency deficiency — Q3 monitoring refactor through Oc...
Severity
medium
Control Code
O4
18 Sep 2026, 03:45 UTC
Evidence Uploaded
Sarah Kim, CPA
File Name
servicenow-new-hire-tickets-fy2026.xlsx
File Hash
c302bd18…5b472...
File Size
411.5 KB
15 Sep 2026, 10:00 UTC
Evidence Uploaded
Sarah Kim, CPA
File Name
okta-user-provisioning-export-q1-q4.csv
File Hash
148e57ac…b6985...
File Size
180.0 KB
8 Sep 2026, 10:00 UTC
Exception Raised
Sarah Kim, CPA
Title
Emergency-change carve-out invoked — pre-deployment CAB appr...
Severity
medium
Control Code
C1
14 Aug 2026, 03:30 UTC
Exception Raised
Sarah Kim, CPA
Title
Joiner-SLA miss — same root cause, occurred before remediati...
Severity
low
Control Code
A1
8 Mar 2026, 00:00 UTC
Exception Raised
Sarah Kim, CPA
Title
Joiner-SLA miss — manager on PTO, no backup approver configu...
Severity
low
Control Code
A1
28 Feb 2026, 00:00 UTC
Sampling Run Generated
Sarah Kim, CPA
Method
random
Size
90
Risk
high
17 Feb 2026, 11:00 UTC
Sampling Run Generated
Sarah Kim, CPA
Method
random
Size
58
Risk
medium
16 Feb 2026, 11:00 UTC
Sampling Run Generated
Sarah Kim, CPA
Method
random
Size
100
Risk
high
15 Feb 2026, 11:00 UTC
Sampling Run Generated
Sarah Kim, CPA
Method
random
Size
58
Risk
medium
14 Feb 2026, 11:00 UTC
Sampling Run Generated
Sarah Kim, CPA
Method
random
Size
100
Risk
high
13 Feb 2026, 11:00 UTC
Sampling Run Generated
Sarah Kim, CPA
Method
random
Size
58
Risk
medium
12 Feb 2026, 11:00 UTC
Population Replaced
Sarah Kim, CPA
Control Code
S3
Row Count
92
12 Feb 2026, 10:00 UTC
Sampling Run Generated
Sarah Kim, CPA
Method
random
Size
45
Risk
medium
11 Feb 2026, 11:00 UTC
Population Replaced
Sarah Kim, CPA
Control Code
O4
Row Count
184
11 Feb 2026, 10:00 UTC
Sampling Run Generated
Sarah Kim, CPA
Method
random
Size
100
Risk
high
10 Feb 2026, 11:00 UTC
Population Replaced
Sarah Kim, CPA
Control Code
O1
Row Count
365
10 Feb 2026, 10:00 UTC
Population Replaced
Sarah Kim, CPA
Control Code
C3
Row Count
142
9 Feb 2026, 10:00 UTC
Population Replaced
Sarah Kim, CPA
Control Code
C1
Row Count
287
8 Feb 2026, 10:00 UTC
Population Replaced
Sarah Kim, CPA
Control Code
A9
Row Count
156
7 Feb 2026, 10:00 UTC
Population Replaced
Sarah Kim, CPA
Control Code
A6
Row Count
88
6 Feb 2026, 10:00 UTC
Population Replaced
Sarah Kim, CPA
Control Code
A1
Row Count
412
5 Feb 2026, 10:00 UTC
Control Created
Sarah Kim, CPA
20 Jan 2026, 16:00 UTC
Control Created
Sarah Kim, CPA
20 Jan 2026, 15:00 UTC
Control Created
Sarah Kim, CPA
20 Jan 2026, 14:00 UTC
Control Created
Sarah Kim, CPA
20 Jan 2026, 13:00 UTC
Control Created
Sarah Kim, CPA
20 Jan 2026, 12:00 UTC
Control Created
Sarah Kim, CPA
20 Jan 2026, 11:00 UTC
Control Created
Sarah Kim, CPA
20 Jan 2026, 10:00 UTC
Control Created
Sarah Kim, CPA
20 Jan 2026, 09:00 UTC
Engagement Updated
Sarah Kim, CPA
15 Jan 2026, 09:15 UTC
Engagement Created
Sarah Kim, CPA
Name
FY2026 IT General Controls Audit
Client Name
Apex Financial Group
Audit Period Start
2026-01-01
15 Jan 2026, 09:00 UTC

62 material events of 62 total audit entries

Evidence Index 12
AICPA AU-C 500 — Audit Evidence
Evidence Sufficiency: 609 of 609 samples have mapped evidence (100%%).
# File Name Type Size Uploaded Linked Controls Hash (SHA-256)
1 okta-user-provisioning-export-q1-q4.csv CSV 180.0 KB 8 Sep 2026 A1 148e57ac75bc8f4ac05e886eac9a18b54dab29bff97dff8792dc16bb6985f864
2 servicenow-new-hire-tickets-fy2026.xlsx Excel (.xlsx) 411.5 KB 15 Sep 2026 A1 c302bd18744adf804b5f8574912c779ed317b77ce8dcd1bc63f7b135b47269b3
3 manager-approval-screenshots-sample-pack.pdf PDF 2.3 MB 22 Sep 2026 A1 c068cbea4a189b6e6ffcedaad7963fe2da2ab927f7abc53fff73ee20dad3cb0b
4 okta-uar-q1-q4-completions.csv CSV 96.5 KB 3 Oct 2026 A6 07d0f6c7c93d62ef9efb0642be9c83372006446cef935fac6fc7221b603de466
5 removed-access-evidence-pack.pdf PDF 1.2 MB 12 Oct 2026 A6 737730ec030a7d51e0e0c9c2141801fad86ff33175b669bfbae099a21c3315db
6 aws-iam-policy-review-q1-q4.csv CSV 153.1 KB 21 Oct 2026 A9 4a96074a2c1d24c5ac9f7245f81a100cab6e92f022e53df5c0789961f2eed17a
7 iam-quarterly-review-attestations.pdf PDF 964.5 KB 2 Nov 2026 A9 5799a89471b8c352ef2582912f3f0fc2ee0276b212d618703fe7a7ade0f99de3
8 jira-change-tickets-fy2026.csv CSV 554.6 KB 9 Nov 2026 C1 4dd7e778e9cfcc7552758a96f0bc7eca23db61862111dd4299d72f781cefe6ba
9 github-pr-merge-records-fy2026.csv CSV 770.5 KB 16 Nov 2026 C1 805ec5659abe25d15497f7b3f141e9010a32109af0462d77c5611ba634259699
10 emergency-change-policy-v3.2.pdf PDF 337.6 KB 23 Nov 2026 C1 5abea689ecc9a75e7916754bda620a29763f609994db04569c0e3819b0afe40b
11 post-implementation-review-records.xlsx Excel (.xlsx) 229.1 KB 30 Nov 2026 C1 608f2ceb7d2edc073fd120b3926c1479d0dd613e19e6789038d214c8ef0b4e9b
12 github-releases-tagged-fy2026.csv CSV 120.6 KB 8 Jan 2027 C3 38d9af24f3ff61dcb67b49999315c5bc9c0a7e9eef5b791200c1799bbf61b63e
13 release-notes-archive-q1-q4.pdf PDF 4.4 MB 15 Jan 2027 C3 0111ff44bbe4155bda9f7ac4d5e72a511731c3fc065d77994d1568ef1ca23be0
14 aws-backup-completion-logs-fy2026.csv CSV 663.0 KB 22 Jan 2027 O1 1ef8adfed983184dcc0bea60720b4e21a13b7c4fe61eaa76a785767cf2cff053
15 dr-drill-october-2026-report.pdf PDF 3.3 MB 29 Jan 2027 O1 10a5ccdb77fb51ae2fda563ff2f97be2c702f08905a8f93811941e0d391a8d57
16 rds-snapshot-integrity-verification.xlsx Excel (.xlsx) 446.1 KB 5 Feb 2027 O1 63cd631bd582e826c168551f50e8d1511ae11e6f662392992bf216f66e7d751b
17 datadog-alerts-fy2026.csv CSV 229.1 KB 12 Feb 2027 O4 ef70248d0de86e02263c7a3de38fd355ecbd3f66cdc2cf2ecc44752ac91b18ce
18 pagerduty-incidents-fy2026.csv CSV 337.6 KB 19 Feb 2027 O4 2cd1c07abd68ebf63557b1cbf8b75266217017028c5d2516220f40c71d42f716
19 monitoring-rule-config-snapshots.pdf PDF 1.5 MB 26 Feb 2027 O4 2dd69a3561635b3edcd1e49058cbf1d1fb9626ec4736fa090b6d7f414e786a2e
20 wiz-vulnerability-export-fy2026.csv CSV 869.3 KB 5 Mar 2027 S3 b77d84097992c1081e92ba2f9d16c42a21a27b2ee683f1edab7793bb2b33da11
21 snyk-remediation-tracker-fy2026.xlsx Excel (.xlsx) 663.0 KB 12 Mar 2027 S3 ec1c75994dfcbc2e10478e69f46dc1c72ce998aa82db91479d17dee3f6ea75aa
22 vuln-mgmt-sla-policy-v2.1.pdf PDF 229.1 KB 19 Mar 2027 S3 311d5d3795e3ebdecd2ba50ab357cbe72a26adee22a5f752aa964c5d1bd9c7ba
Total: 22 files | 19.75 MB
Note: Evidence files are managed within the engagement platform with role-based access controls. SHA-256 hashes are computed at upload for integrity verification.
Abbreviations & Glossary 13
Standard terminology used throughout this workpaper
AICPA
American Institute of Certified Public Accountants
BCP
Business Continuity Plan
CAB
Change Advisory Board
CHG
Change ticket (Jira nomenclature for production change record)
COSO
Committee of Sponsoring Organizations (2013 Framework)
DR
Disaster Recovery
EDR
Expected Deviation Rate (sample-size determination factor)
IaC
Infrastructure as Code
INC
Incident (PagerDuty incident identifier prefix)
ITGC
IT General Controls
MFA
Multi-Factor Authentication
PCAOB
Public Company Accounting Oversight Board
PII
Personally Identifiable Information
PIR
Post-Implementation Review (emergency-change carve-out)
QC
Quality Review
RPO
Recovery Point Objective
RTO
Recovery Time Objective
SHA-256
Secure Hash Algorithm (256-bit)
SLA
Service Level Agreement
SOX
Sarbanes-Oxley Act
TDR
Tolerable Deviation Rate (sample-size determination factor)
TKT
Ticket (Okta provisioning ticket identifier prefix)
TSC
Trust Services Criteria (SOC 2 framework)
UAR
User Access Review
WP-Ref
Workpaper Reference (engagement document identifier)