UnixTime

Research Note

Development Test Production Separation Checklist

  • Updated Jun 17, 2026
  • Read 01 min read
  • Status reviewed

Use this checklist to review whether development, test, staging, and production separation is real and enforceable.

On this page

When to use this

Use this checklist to review whether development, test, staging, and production separation is real and enforceable.

Checklist

  • Environment inventory is complete.
  • Environment owners are assigned.
  • Access roles differ between development, test, and production.
  • Shared accounts are prohibited or risk-accepted.
  • Production access is separately approved.
  • Network connectivity between environments is restricted.
  • CI/CD deployment permissions are controlled.
  • Manual production changes are prohibited or tightly controlled.
  • Production data in test is avoided, masked, or approved.
  • Test and development systems are patched and baselined.
  • Logging covers deployment and administrative activity.
  • Separation controls are tested or reviewed periodically.

Review table

Environment/path reviewed Control expected Evidence Gap Action owner Due date
TBD TBD TBD TBD TBD TBD
  • Template
  • Iso27001
  • Environment separation
  • Audit

Note Metadata

Aliases: Dev Test Prod Separation Checklist

Source: 90 Templates/Development Test Production Separation Checklist.md