IDENTITY · ACCESS · EVIDENCE

Security & Audit Administration

Encrypted in transit & at rest
Immutable double-entry ledger
OAuth/OIDC · MFA · RBAC
Signed webhooks · Rate limited APIs
Active users
184
7 roles
MFA coverage
100%
Privileged users
Active sessions
241
3 flagged for review
API clients
12
All OAuth 2.0
Webhook endpoints
8
Signed & healthy
Security events
4
Past 24 hours
Failed logins
17
0 lockouts
Audit events
12,841
September 2026

Role access overview

RBAC · least-privilege policy

RoleUsersMFAFinancial approvalData export
Customer Service Agent72RequiredRequest onlyRestricted
Prepaid Operations41RequiredNoOperational
Finance Officer18RequiredMakerFinancial
Finance Approver8RequiredCheckerFinancial
System Administrator12RequiredNo financialSystem
Auditor9RequiredRead onlyAudit
Executive Read Only24RequiredNoneSummary

System security posture

Live control indicators

OAuth / OIDCEnforced
Payment tokenizationActive
Raw card storageNone
EncryptionAt rest & in transit
Backup / DRVerified

API clients

Machine-to-machine access

Immutable audit log

Tamper-evident event history · timestamps in Bahamas local time

TimestampActorRoleActionResourceIP / deviceCorrelation IDOutcome
14 Sep 2026 08:31:12Alicia RolleFinance ApproverReversal approvedTXN-20260913-8011110.14.7.22 · ChromeCOR-77B19ASuccess
14 Sep 2026 08:24:06Devon BainSystem AdministratorAPI credential rotatedwsc-meter-adapter10.14.2.18 · EdgeCOR-77A83CSuccess
14 Sep 2026 08:18:41Maya CartwrightCustomer Service AgentCustomer record viewedWSC-0012847210.14.5.61 · EdgeCOR-77A19DSuccess
14 Sep 2026 08:04:22Omar JohnsonPrepaid OperationsMeter event reprocessedHYD-2-77512010.14.3.11 · ChromeCOR-77990FSuccess
14 Sep 2026 07:52:10Janelle MossFinance OfficerExport generatedSettlement 09010.14.7.19 · EdgeCOR-77811ASuccess

Session & device history

UserDeviceLocationLast activeRisk
Alicia RolleChrome · WindowsNassauNowNormal
Janelle MossEdge · WindowsFreeport8mNormal
Devon BainSafari · iOSNassau22mReview

Service accounts

AccountPurposeRotationStatus
svc-meter-ingestHES/MDM ingestion01 SepActive
svc-payment-hookSigned webhooks10 SepActive
svc-report-exportScheduled reports03 SepActive