PDP-10 SDLC – Separation of environments

What is this control about?

SDLC – Separation of environments – In the Software Development Life Cycle (SDLC) it is important to maintain separate environments to develop, test and deploy. Most organizations have this set up.

Available tools in the marketplace

Available templates

TrustCloud has a curated list of templates internally or externally sourced to help you get started. Click on the link for a downloadable version:

• N/A – no templates recommendation

Control implementation

Create separate stages in your production environment:

1. DEV
2. STAGING
3. PROD

What evidence do auditors look for?

Most auditors, at a minimum are looking for the below suggested action:

• Provide screenshots of the different environments

Evidence example

From the suggested action above, an example is provided below.

1. Provide a screenshot of the different environments.

TrustCloud’s example demonstrates the production staging, and test environments