Segregation of IT Environments Standard

The Segregation of IT Environments Standard supports the IT control framework with respect to segregation of IT environments. It outlines the minimum information security controls for segregation of labs, development, test, and production environments. The key principle of segregation of environments is that the integrity & availability of the production computing environment and the business data residing therein must be protected from unauthorized access, changes and other negative impacts.

Different access rules and data integrity considerations apply to the development & test environments. Hence controls must be in place to isolate these environments from each other as appropriate.