
A.12.3.1: Information Backup
Implement procedures to back up information and test them regularly.


A.12.1.4: Separation of Development, Testing, and Operational Environments
Implement separation of development, testing, and operational environments to reduce risks from unauthorized access or changes.