ISO 27001 8.4 Access to Source Code

Requirement

"Read and write access to source code, development tools and software libraries shall be appropriately managed."[1]

Explanation

Access to development tools should only be given to personnel who are part of software development efforts and access to code repositories and libraries should be restricted on a need-to-know basis.

References

  1. ISO/IEC 27001

Need help putting this into practice? See our ISO 27001 compliance services or read our ISO 27001 articles.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo

See LakeRidge in action.

Loading the booking calendar…