Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1)
5.10 and 5.11: System acquisition, development and maintenance; outsourcing security – Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1)

Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1) 5.10.2: Manage and protect production credentials

What does 5.10.2 require?

Because cloud deployment tasks commonly sit with development staff, credentials for the production environment are kept securely to prevent unauthorised access to and tampering with application programs and control files, under comprehensive policies and procedures that are strictly followed to preserve the integrity of the application environment.

Maintained by Gerard Blokdyk

Other controls in 5.10 and 5.11: System acquisition, development and maintenance; outsourcing security – Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.