NIST 800-53 rev.5/System and Services Acquisition/643 of 1011
SA-03 (02)System Development Life Cycle | Use of Live or Operational Data
Control family: System and Services Acquisition
Control description
(a) Approve, document, and control the use of live data in preproduction environments for the system, system component, or system service; and
(b) Protect preproduction environments for the system, system component, or system service at the same impact or classification level as any live data in use within the preproduction environments.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.