GRCLibrary.ai

Standard

Production Security Requirements

This standard defines security requirements for production infrastructure and operations. It covers the controls that govern how production systems are secured, monitored, changed, and recovered. For deployment pipeline and DevOps controls, see the DevOps Security Requirements Standard.

Type
Standard
Version
1.1.32
Date
2026-09-24
Owner
Chief Information Officer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
Operations
Review frequency
Annual and upon material platform or regulatory change
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • 1. Purpose
  • 2. Network security operations
  • 3. Backup and recovery operations
  • 4. Security monitoring and incident response
  • 5. Patch and vulnerability management
  • 6. Change management
  • 7. Infrastructure programme security gate requirements
  • 8. Documentation requirements
  • 9. Cloud security configuration
  • 10. On-premises middleware security
  • 11. EOL: production obligations
  • 12. Framework alignment

Frameworks it maps to

Related documents