We recommend that FSA ensure segregation of duties and least privilege principles are adhered to when granting user access to prevent users with the ability to develop and/or change application code from having update access to the environment where the final tested and approved changes are staged prior to migration to the financial and mixed systems’ production environment; and prevent users with access to develop code from having update access to the production environment.