Are controls in place to prevent unauthorized access to your application, program, or object source code, and assure it is restricted to authorized personnel only?

Related articles

• Do you conduct application penetration tests of your cloud infrastructure regularly?
• Do you support role-based access control (RBAC) for end-users / administrators?
• Do you publish a list of all APIs available in the service and indicate which are standard and which are customized?
• Do you have a written policy for user changes (joiners, movers, leavers) to be handled?
• Are controls in place to prevent unauthorized access to tenant application, program, or object source code, and assure it is restricted to authorized personnel only?