Application programmer privileges to change production code and data are limited and are periodically reviewed.
|MAC / CONF||Impact||Subject Area|
|MACIII||Medium||Enclave Computing Environment|
|The reliability, availability, and integrity of applications are at risk if there are too many programmers making production code and data changes. An effective configuration management plan should address managing and monitoring the personnel allowed to make code changes with a review accomplished periodically.|
| 1. The CCB shall identify the files/data sets that contain production code or production data and then authorize and document who is allowed to make changes to the production code or data. |
2. The System Administrator shall limit the application programmer accounts to the minimum number of privileges needed to perform their assigned duties.
3. The CCB shall limit and periodically review the total number of application programmers authorized to make production code changes.