3 ms·
Definitely not good for PCI DSS. Requirement 6.4 reads: Examine policies and procedures to verify the following are defined: • Development/test environment
by Artemis2 9y ago
Definitely not good for PCI DSS. Requirement 6.4 reads:
Examine policies and procedures to verify the following are defined:
• Development/test environments are separate from production environments with access control in place to enforce separation.
• A separation of duties between personnel assigned to the development/test environments and those assigned to the production environment.
• Production data (live PANs) are not used for testing or development.
• Test data and accounts are removed before a production system becomes active.
• Change control procedures related to implementing security patches and software modifications are documented.
- _Codemonkeyism 9y agoThanks, now I remember from my PCI DSS days.