7.9。Operation security ............................................................................................................. 27 7.9.1.操作程序和职责............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... 28 7.9.2。Segregation of Duties .................................................................................................. 29 7.9.3.Capacity Management ................................................................................................. 29 7.9.4.开发，测试和操作环境的分离................................................................................................................................................................................................................................................................................................................................................................................................................................................... 29 7.9.5。Control of Operational Software ................................................................................... 30 7.9.6.系统文档的安全性........................................................................................................................................................................................................... 30 7.9.7。Physical Media Transfer .............................................................................................. 31 7.9.8.公开可用的信息......................................................................................................................................................................................................................................................................................................................................................... 31 7.9.9。信息系统审核注意事项................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... 31