The data and other materials used for testing should be carefully selected and protected.
Production information that contains personal or other confidential information should not be used for testing purposes.
The use of production data for testing purposes should be avoided. If confidential information is used in testing, the following security measures should be used: