Requirement
"Test information shall be appropriately selected, protected and managed."[1]
Explanation
When testing information system components non-sensitive or pseudo information should be used. Environments that are still under development may not have the appropriate security controls in place to protect real data and real data may be lost or modified during testing.
