6.5.4—Roles and functions are separated between production and pre-production environments to provide accountability such that only reviewed and approved changes are deployed.
>Requirement Description
Roles and functions are separated between production and pre-production environments to provide accountability such that only reviewed and approved changes are deployed. Applicability Notes In environments with limited personnel where individuals perform multiple roles or functions, this same goal can be achieved with additional procedural controls that provide accountability. For example, a developer may also be an administrator that uses an administrator-level account with elevated privileges in the development environment and, for their developer role, they use a separate account with user-level access to the production environment.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.