Limiting access to production systems and applications is a significant aspect of security and integrity of a company’s computing resources. Unrestricted access to production systems and applications could adversely impact a company’s business and financials.

The purpose of this policy is to define proper controls to production systems and applications. The scope applies to non-end users who have access to the company’s internal production systems and applications. Specific procedures include defining the roles and responsibilities for enforcing production access, disseminating and updating account access information, and implementing change requests.