AQT / IDENTITY & ACCESS
Access Governance
Who has access, why they have it, and what proves it is still appropriate.
SOURCE-DERIVED SCENARIO · CROSSWALK AVAILABLE
What I built
An 18-finding access-control crosswalk and remediation tracker. It retains the original Grey Matter / BrainMeld scenario inside the fictional AQT environment.
How I approached it
I preserved each source finding and its compliance status, then connected access conditions to control themes, evidence needs, recommended remediation, and responsible areas. Interpretive mappings stay identified as suggestions.
What surfaced
18Source findings
14Control gaps
4Compliant findings
Privileged-role misalignment, shared credentials, broad vendor access, and weak remote-access evidence reduce accountability. The four compliant findings remain compliant. A review should reflect the evidence.