Readiness sprint cockpit
Meridian Pay (synthetic demo) · CTM CSA-CTM-self-assessment-v202504 · promoter
Demo fixtureEvidence Fix Loop
83%readiness

Readiness is 83% with 0 missing controls, 2 partial controls, 22 evidence proof gaps, 1 open assessor threads, and 0 overdue delivery tasks.

4 met2 partial0 missing10 evidence rows
0
Open tasks
0
Overdue
22
Weak proof
1
Stale / expiring
1
Assessor threads
1
Rejected

Owner Load

9 owners
sara.koh@meridianpay.example9h estimated
5 open4 high0 overdue
wei.tan@meridianpay.example7h estimated
4 open3 high0 overdue
arjun.rao@meridianpay.example6h estimated
3 open3 high0 overdue
mei.lim@meridianpay.example4h estimated
2 open2 high0 overdue
Infrastructure owner3h estimated
3 open0 high0 overdue
IT / IAM owner3h estimated
3 open0 high0 overdue

Expansion Targets

Frameworks
CTM to ISO 27001Medium
0 reuse-ready0 weak/stale6 review0 net-new

Review Queue Ready · 6h

CTM to SOC 2Medium
0 reuse-ready0 weak/stale5 review0 net-new

Review Queue Ready · 5h

CTM to ISO 42001Model Required
0 reuse-ready0 weak/stale0 review0 net-new

Framework Model Required · 0h

Ranked Action Queue

24 visible
Challenge residual-risk evidence approval basis

Run remediation and regenerate package evidence.

Assessor Challengesara.koh@meridianpay.exampleassessor_roomdue 2026-07-06
Urgent3h
AC-1 · okta:access_review

complete human review

Evidence Fixarjun.rao@meridianpay.exampleCTMdue 2026-06-20
High2h
ASM-1 · aws:asset_inventory

complete human review

Evidence Fixarjun.rao@meridianpay.exampleCTMdue 2026-08-26
High2h
LOG-1 · aws:audit_logging

complete human review

Evidence Fixmei.lim@meridianpay.exampleCTMdue 2026-08-26
High2h
AC-1 · okta:mfa_privileged

complete human review

Evidence Fixarjun.rao@meridianpay.exampleCTMdue 2026-08-28
High2h
DP-1 · crowdstrike:device_encryption

complete human review

Evidence Fixsara.koh@meridianpay.exampleCTMdue 2026-08-29
High2h
IR-2 · crowdstrike:edr_coverage

complete human review

Evidence Fixwei.tan@meridianpay.exampleCTMdue 2026-08-29
High2h
IR-2 · evp_demo_soc_0001

complete human review

Evidence Fixwei.tan@meridianpay.exampleCTMdue 2026-08-30
High2h
LOG-1 · evp_demo_soc_0001

complete human review

Evidence Fixmei.lim@meridianpay.exampleCTMdue 2026-08-30
High2h
DP-1 · tnt_demo/manual/DP-1/encryption-and-backup-policy.pdf

complete human review

Evidence Fixsara.koh@meridianpay.exampleCTMdue 2027-05-10
High2h
GOV-1 · tnt_demo/manual/GOV-1/governance-charter-2026.pdf

complete human review

Evidence Fixwei.tan@meridianpay.exampleCTM
High2h
Residual-risk acceptance evidence

Answer with cited evidence and human approval.

Assessor Requestsara.koh@meridianpay.exampleassessor_roomdue 2026-07-05
High1h
Confirm privileged-access sample scope

Answer with cited evidence and human approval.

Assessor Requestiam.owner@meridianpay.exampleassessor_roomdue 2026-07-08
Medium1h
Data protection and tested backups

Collect fresh accepted evidence and close the control gap.

Control Gapsara.koh@meridianpay.exampleCTMdue 2026-06-30
Medium1h
Incident response capability is tested

Collect fresh accepted evidence and close the control gap.

Control Gapwei.tan@meridianpay.exampleCTMdue 2026-07-15
Medium1h
Complete human review for A.5.1 with Compliance lead.

Confirm scope, reviewer sign-off, and whether the evidence period matches ISO27001:2022 for A.5.1.

Framework ExpansionCompliance leadISO27001:2022
Medium1h
Complete human review for A.5.24 with Security operations.

Confirm scope, reviewer sign-off, and whether the evidence period matches ISO27001:2022 for A.5.24.

Framework ExpansionSecurity operationsISO27001:2022
Medium1h
Complete human review for A.5.9 with Infrastructure owner.

Confirm scope, reviewer sign-off, and whether the evidence period matches ISO27001:2022 for A.5.9.

Framework ExpansionInfrastructure ownerISO27001:2022
Medium1h
Complete human review for A.8.15 with Infrastructure owner.

Confirm scope, reviewer sign-off, and whether the evidence period matches ISO27001:2022 for A.8.15.

Framework ExpansionInfrastructure ownerISO27001:2022
Medium1h
Complete human review for A.8.24 with Infrastructure owner.

Confirm scope, reviewer sign-off, and whether the evidence period matches ISO27001:2022 for A.8.24.

Framework ExpansionInfrastructure ownerISO27001:2022
Medium1h
Complete human review for A.8.5 with IT / IAM owner.

Confirm scope, reviewer sign-off, and whether the evidence period matches ISO27001:2022 for A.8.5.

Framework ExpansionIT / IAM ownerISO27001:2022
Medium1h
Complete human review for CC1.1 with Compliance lead.

Confirm scope, reviewer sign-off, and whether the evidence period matches SOC2-TSC for CC1.1.

Framework ExpansionCompliance leadSOC2-TSC
Medium1h
Complete human review for CC6.1 with IT / IAM owner.

Confirm scope, reviewer sign-off, and whether the evidence period matches SOC2-TSC for CC6.1.

Framework ExpansionIT / IAM ownerSOC2-TSC
Medium1h
Complete human review for CC6.7 with IT / IAM owner.

Confirm scope, reviewer sign-off, and whether the evidence period matches SOC2-TSC for CC6.7.

Framework ExpansionIT / IAM ownerSOC2-TSC
Medium1h