Back to all 93 controls
Annex A 8.31
Technological
A.8.31 Separation of development, test and production environments
Separate dev, test and prod.
What good looks like
Independent environments, no production data in lower environments without controls.
Evidence an auditor will ask for
Environment inventory, data-handling procedure.
Put this control into practice
Check whether your organisation already meets Annex A 8.31 with the free Gap Analysis tool, or get implementation-ready templates for every Annex A control with the Document Pack.