Mechanisms exist to approve, document and control the use of live data in development and test environments.
Does the organization approve, document and control the use of live data in development and test environments?