NIST SP 800-218A PO.5.1: Separate and protect each development environment, including training pipelines and model registries (High)

What does PO.5.1 require?

Each environment involved in software development (development, model training, build, test, distribution) is separated and protected. The organisation may separate execution environments through isolation, segmentation, containment or access only by API where feasible. It monitors, tracks and limits the resource usage and request rates of model users during development; keeps sensitive data used in development, production data included, only in approved environments and approved locations within them; protects pipelines, registries and the other environment components on least-privilege terms; keeps continuous watch on training activity in pipelines and on changes to models in the registry; configures each environment under recommended secure configuration practice; and continuously monitors every environment for secrets left in plain text.