IVS-08: Production / Non-Production Environments

CSF v1.1 References:

PF v1.0 References:

Control Statement

Production and non-production environments shall be separated to prevent unauthorized access or changes to information assets. Separation of the environments may include: stateful inspection firewalls, domain/realm authentication sources, and clear segregation of duties for personnel accessing these environments as part of their job duties.