Mechanisms exist to approve, document and control the use of live data in development and test environments.
Control Question
Assessment question for control validation
Does the organization approve, document and control the use of live data in development and test environments?
Supply Chain Risk Management (SCRM) Tiers
Applicable SCRM tier levels for this control
Tier 2 - Operational
Tier 3 - Tactical
Core Control Designations
Special designations and baseline inclusions