DSI-05: Non-Production Data
Control Family:
Threats Addressed:
Next Version:
- Cloud Controls Matrix v4.0:
- DSP-15: Limitation of Production Data Use
Control Statement
Production data shall not be replicated or used in non-production environments. Any use of customer data in non-production environments requires explicit, documented approval from all customers whose data is affected, and must comply with all legal and regulatory requirements for scrubbing of sensitive data elements.
[csf.tools Note: For more information on the Cloud Controls Matrix, visit the CSA Cloud Controls Matrix Homepage.]
Cloud Control Matrix is Copyright 2023 Cloud Security Alliance.