Listing of Users who can Deploy Changes to Production
Provide system screenshots or a system-generated list of users that have access and authority to deploy production changes.
Evidence of Branch Protection Rules for Production Repositories
Provide system screenshots demonstrating that branch protection rules are in place for production repositories which require a separate approval before merging, and disallow direct commits to the branch without use of pull requests
Associated Unified Control ID | Associated Framework Control |
CTRL-65 | LCL-54 |