Policy Restricting Production Data in Lower Environments
Provide your policy or procedure that outlines your requirements for using and storing production data.
The evidence should demonstrate that:
Access to sensitive and customer data is restricted
Storage of sensitive and customer data is restricted to only the production environment and is prohibited in lower environments
Associated Unified Control ID | Associated Framework Control |
CTRL-1186 | REQ-66 |