RSK-4310 · Unauthorized access

Service account with standing production access

svc-payments-01 holds standing write entitlement instead of just-in-time elevation.

high

Exposure score

12/25

likelihood 3 × impact 4

Remediation SLA

8 days

detected 2026-07-09 08:15

Accountable owner

IAM

named under the AI risk charter

Affected agent

Payments Exception Agent

AGT-1161 · Payments

Investigation

What the sweep found and how it was corroborated

svc-payments-01 holds standing write entitlement instead of just-in-time elevation.

Standing days

94

JIT coverage

0%

Privileged calls

4,218

Exposure position

Placed at likelihood 3, impact 4 on the enterprise 5×5 matrix.

Remediation plan

Tracked to closure

  • Convert to JIT elevation
  • Rotate credentials
  • Add session recording

Case metadata

Risk ID
RSK-4310
Category
Unauthorized access
Detected
2026-07-09 08:15
Owner
IAM
SLA
8 days
Agent record
AGT-1161