A.14.2.1: Secure Development Policy
Establish a secure development policy, including security requirements for information systems.
A.12.1.4: Separation of Development, Testing, and Operational Environments
Implement separation of development, testing, and operational environments to reduce risks from unauthorized access or changes.