The development and test environment(s) shall be isolated from the production environment.
Guidance
- Any change one wants to make to the ICT/OT environment should first be tested in an environment
that is different and separate from the production environment (operational environment) before
that change is effectively implemented . That way, the effect of those changes can be analysed and
adjustments can be made without disrupting operational activities.
- Consider adding and testing cybersecurity features as early as during development (secure development lifecycle principles).
Software under development, testing and production is run in differentiated technical environments in order to ensure the quality of development work in an environment that adapts to the production environment and, on the other hand, the production environment is not disturbed by unfinished development.
Sensitive or personal data of users is not copied and used in a development environment.
Elevate Your Knowledge with Exclusive Access to Weekly Webinars, Video Courses, Help Articles, and Blogs.
