ISO 27001 8.31 Separation of Development, Test and Production Environments Requirement:
"Development, testing and production environments shall be separated and secured."[1]
ISO 27001 8.31 Separation of Development, Test and Production Environments Requirement Explanation:
Part of secure software development involves having a separate development test and production environment. This is to prevent compromising the confidentiality integrity and availbility of the production app and data. Only after having fully tested any software changes in the test enviornment may it be deployed to the production environment.
References:
Quick & Simple
Discover Our Cybersecurity Compliance Solutions:
Whether you need to meet and maintain your compliance requirements, help your clients meet them, or verify supplier compliance we have the expertise and solution for you