Organization should manage access to source code, development tools, and software libraries to control both reading and writing. This helps prevent unwanted changes, keeps things secure, and safeguards valuable ideas. For example when an organization utilizes open-source or third-party code components, it is permissible to grant broad read access to external code repositories while restrictions are maintained on write access.
Access to source code and other related plans is controlled to prevent e.g. adding unauthorized code and avoiding unintentional changes. Access rights are allocated on a need-to-know basis and, for example, support staff are not granted unlimited access rights.
Source code control can be implemented, for example, by storing all code centrally in a dedicated source code management system.