Topic

Development environments

Applicable to

all

History

Priority

should

Aug 2020

Development, testing and production environments are segregated.

Security control 0400 was modified slightly.

Jul 2020

Software development, testing and production environments are segregated.

2017

Software development environments should be configured such that there are at least threeenvironments covering development, testing and production.

Control Text Changed. No public explaination.

2015

Agencies should ensure that software development environments are configured such thatthere are at least three environments covering development, testing and production.

2010

Agencies should ensure that software development environments are configured such that:• there are at least three environments covering:– development– testing– production• information flow between the environments is strictly limited according to a defined and documentedpolicy, with access granted only to system users with a clear business requirement• new development and modifications only take place in the development environment• write access to the authoritative source for the software is disabled.

2008

Agencies should ensure that software development environments are configured such that: a. there are at least three environments covering: 1) development 2) testing 3) production b. information flow between the environments is strictly limited according to a defined and documented policy, with access granted only to system users with a clear business requirement c. new development and modifications only take place in the development environment d. write access to the authoritative source for the software is disabled.