DSI-05: Non-Production Data

CSF v1.1 References:

PF v1.0 References:

Control Statement

Production data shall not be replicated or used in non-production environments. Any use of customer data in non-production environments requires explicit, documented approval from all customers whose data is affected, and must comply with all legal and regulatory requirements for scrubbing of sensitive data elements.