A small team that cannot fully separate who writes and who deploys code might rely on enforced peer review and logged, reviewed deployments instead. It should be documented with the gap it covers.
Read more
Related terms
- Segregation of duties
- Segregation of duties is the principle that no one person can carry out and conceal a sensitive action alone, such as making and deploying a change.
- Control
- A control is a measure an organization puts in place to manage a risk or meet a requirement, such as an access review, an approval step or encryption.