...
To keep risk to an acceptable level, Alpha Serve shall ensure that the proper security controls will be implemented for each application. Data owners, custodians, system administrators, and application developers Application developers, QA specialists, DevOps specialists, support engineers, and project managers are expected to use their professional judgment in managing risks to the information, systems and applications they develop, test, use and support. All security controls should be proportional to the confidentiality, integrity, and availability requirements of the data processed by the system.
...