Security of system files

Objective: To ensure that IT project and support activities are conducted in a secure manner.

Access to system files should be controlled.

Control of operational software

Strict control should be exercised over the implementation of software on operational systems.

Protection of system test data

Test data should be protected and controlled.

Access control to program source code

Strict control should be maintained over access to program source code.