Control Deficiency
Records: 2
| ID | Deficiency Code | Title | Summary | Root Cause | Business Impact | |
|---|---|---|---|---|---|---|
|
|
1 | DEF-ACC-01 | Quarterly privileged access review not performed | Privileged access to the finance system was not re... | No calendar-driven trigger or accountable owner fo... | Excessive or stale privileged access may go undete... |
|
|
2 | DEF-ACC-02 | Terminated user accounts not disabled promptly | Two terminated staff retained active finance-syste... | No automated feed from HR terminations to access r... | Former staff could retain system access. |