Remediate

Remediation

The platform recommends changes and records progress. Engineers implement changes through the Bank's own change process; nothing is modified automatically.

OPEN13
ASSIGNED4
CHANGE PLANNED1
IMPLEMENTED0
RETEST REQUIRED0
VERIFIED0
CLOSED0
18
REM-105FND-1046CriticalOPEN

TPP role validated from certificate only

  1. OPEN→
  2. ASSIGNED→
  3. CHANGE PLANNED→
  4. IMPLEMENTED→
  5. RETEST REQUIRED→
  6. VERIFIED→
  7. CLOSED
Current state

roles derived from certificate policy OIDs (Entrust-specific)

Required state

roles validated against Directory organisation authorisations

Recommended change

Validate roles using the Directory organisation lookup response and remove policy-OID inference.

Affected systems
TPP Registration Service
Dependencies
Change advisory board; Sandbox validation
Risk
Critical
Suggested test
TST-013 End-to-end TPP journey
Evidence required
  • Configuration snapshot (post-change)
  • Test result with PASS
  • Engineer attestation
Ownership