Meridian Medical Systems
Device manufacturer (Class II/III) · Minneapolis, MN, US
Customer activePart II Provisioning
History
15 audit events · 2 baselines
EBL-0001 is pending
PJB-0142 partial (sbom-service permanent validation failure); the baseline seals after reconciliation.
Customer onboarding baselineBaselined
Sealed 30 Jan 2026 · approved by Elena Vasquez, Marcus Chen, Sam Okafor
- Organization revision CUS-0001@r7 (hierarchy, 2 legal entities, 2 sites)
- Policy profile POL-2026.2 (COB-DAT-001..010 selections + owners)
- Contact set BC-0001..BC-0005 (role mailboxes)
- Catalog CAT-0001@tax-v3 with CPR-000001..CPR-000003 (import IMP-2026-004 lineage)
- Readiness ruleset COB-RUL v1.3, all blocking rules PASS
- Approval decisions DEC-0001..DEC-0006
Ecosystem and access baselinePending
Not yet sealed
- Ecosystem selections ECO-0001..ECO-0003 (Foundation required; MDG + Cyber selected)
- Tenant entitlements ENT-0001..ENT-0003 (revision chain from ORD-2025-8841 / ORD-2026-0117)
- Desired-state revision DSR-0014 (packages, assignments, license reservations)
Audit timeline
- Entitlement projection refreshedCPQ order ORD-2026-0117 re-resolved; quantities unchanged; freshness FRESH.SyncCommercial sync · ENT-0002 / ENT-0003 · EVT-0301
- Reconciliation completed with driftDesired hash dsh-a41f ≠ actual hash ash-90b2. 1 permanent adapter failure (sbom-service), 1 drift finding DRF-0007 opened. READY remains blocked (ECO-RUL-009).ProvisioningProvisioning orchestrator · PJB-0142 · EVT-0298
- Privileged assignment requestedCyber Owner delegate for P. Raman; pending Security co-approval with step-up authentication.AccessMarcus Chen · ASN-0110 · EVT-0295
- SoD conflict detectedMDG.BASELINE_AUTHOR held via group conflicts with requested MDG.BASELINE_APPROVER (rule SOD-R-014). Assignment held.AccessAccess governance · ASN-0107 / SOD-0007 · EVT-0291
- Permanent failure quarantinedRole vocabulary v3 rejected by adapter v1.4. Remediation: adapter upgrade scheduled 04 Sep 2026.ProvisioningMarcus Chen · PJB-0142 / sbom-service · EVT-0287
- Access package publishedCyber Owner package adds postmarket monitoring permissions; scheduled migration for 12 existing assignments.AccessRavi Patel · PKG-0006 v6 · EVT-0283
- Certification campaign launchedQ3 privileged + sensitive access review; population 41; due 10 Sep 2026.CertificationAccess governance · CRT-2026-03 · EVT-0280
- Drift auto-revokedOut-of-band target grant MDG.EXPORT removed within SLA; governance exception not requested.ProvisioningProvisioning orchestrator · DRF-0005 · EVT-0261