1. Übersicht

DEV-10 Approvals for Provision in the Production Environment

Bezeichnung	Standard
DEV-10.01B	Authorised personnel or system components of the cloud service provider approve changes to the cloud service based on defined criteria (e.g. test results and required approvals) before these are made available to the cloud service customers in the production environment. The definitions for criterion DEV-03 apply.
DEV-10.02B	Cloud service customers are involved in the release according to contractual agreements. If the contractual agreements do not foresee customer involvement of the approval, this should be clearly stated in the contractual agreements in order to fulfil this criterion.
DEV-10.01AC	The approval process is monitored. Timely and appropriate remediation measures address any deviations identified during monitoring.
DEV-10 Supplementary Information - Complementary Customer Criteria	Where changes are to be approved by the cloud service customers in accordance with the contractual agreements before they are made available in the production environment, the cloud service customers ensure with suitable controls that authorised and qualified personnel receives the information made available, assesses the impact on the ISMS framework and decides on the approval in accordance with the conditions specified by the cloud service provider.

Anforderungen
Source	Anforderung

Regulations
Source	Regulierung