SA-15(9)
SA-15(9): Use of Live Data
The organization approves, documents, and controls the use of live data in development and test environments for the information system, system component, or information system service.
Supplemental
The use of live data in preproduction environments can result in significant risk to organizations. Organizations can minimize such risk by using test or dummy data during the development and testing of information systems, information system components, and information system services.
| CIA Levels | |
|---|---|
| Confidentiality | unknown |
| Integrity | unknown |
| Availability | unknown |
| Overlays |
|---|
| None |
| CSF Categories |
|---|
| None |