ISO 27001 8.31 Separation of Development, Test and Production Environments

Requirement

"Development, testing and production environments shall be separated and secured."[1]

Explanation

Part of secure software development involves having a separate development test and production environment. This is to prevent compromising the confidentiality integrity and availbility of the production app and data. Only after having fully tested any software changes in the test enviornment may it be deployed to the production environment.

References

  1. ISO/IEC 27001

Need help putting this into practice? See our ISO 27001 compliance services or read our ISO 27001 articles.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo

See LakeRidge in action.

Loading the booking calendar…