Don't do development on any system that has access to production. Develop on dev lane resources. Production access should only be allowed from a locked down s

Don't do development on any system that has access to production. Develop on dev lane resources. Production access should only be allowed from a locked down system with no open ports and a very small whitelist set of software. Operations for said system should be simple. Deploy version x with necessary provisioning. Backup system. Restore system. View monitoring and logs. You must minimize the surface area connected to production. On the network side the system with the keys for production is also firewalled off from general Internet access. So potential malware can't phone home.