Back to all 93 controls
Annex A 8.4
Technological
A.8.4 Access to source code
Control access to source code.
What good looks like
Repo access by role, branch protection, code review enforced.
Evidence an auditor will ask for
Repo access matrix, branch policies, PR records.
Put this control into practice
Check whether your organisation already meets Annex A 8.4 with the free Gap Analysis tool, or get implementation-ready templates for every Annex A control with the Document Pack.