Development Environment Best Practices

["Joshua Berry" <jberry () PENSON COM>]

Does anyone on this list have any resources for Development environment
best practices.  I am looking for something that explains the need to
separate the production, testing, and development environments.  I also
need something explaining correct processes for developing and
implementing code (such as: developers should not administer the
production servers they install code on, or developers should not have
full admin rights on all boxes, etc).

Any help would be greatly appreciated.  Thanks.

 
Josh Berry | CISSP GCIA 
Information Security
214-765-1296
 
-------------------------------------------------------------------- 
If you spend more on coffee than on IT security, you will be hacked. 
What's more, you deserve to be hacked. 
     -- (Former) White House Cybersecurity adviser Richard Clarke