> Are there any best practices guides on this? I'm not aware of any, but we did have quite a lot of procedures meant to mitigate this sort of things when I wor

> Are there any best practices guides on this? I'm not aware of any, but we did have quite a lot of procedures meant to mitigate this sort of things when I worked in banking. For one, none of the developers had any sort of access to production machines.