We have, of course, in the development that we're talking about, a programming language environment. One of the things that any craftsman, any programmer, any developer will tell you is that the product cannot be any better than how well the tools have been calibrated and used. So it is the case that secure setup and control of this development environment will do much to ensure that secure activities only are performed and that sufficient control is maintained over the work in progress, as well as the operation and usage of the tools used in it.

Now, performance within this environment must also be governed by a security policy that is placed over it, and the procedures to be used within it. And typically, they would be subject to these kinds of conditions. We need to control the separation of duties, if and where possible. We have to be sure that proper oversight and review processes outside of the controls themselves so that we have insight into how well they're working must also be possible.

As is very common in development environments, we need to be sure that we control code and library controls to prevent any sort of contamination or manipulation of the tools. And again, we have to treat the security requirements as intrinsic to the product on balance with the intended product's purpose and utility. One of the things we are trying to avoid, of course, is employing unmanaged code.

Now, unmanaged code does have certain advantages in performance, but the thing that we're trying to avoid is enabling unmitigated risks to manifest themselves inside the program once it's finished, which might include very dangerous things like buffer overflows. One of the tools that we use quite commonly is this sandboxing.

Now, the sandboxing creates a virtual environment in which non-native code can execute, but only within the confines of the sandbox itself. They utilize all the intended components provided within the sandbox and allow us to have proper control for everything that may be outside of the sandbox. Now within cloud environment, sandboxing is typically used to run untested or untrusted code in a tightly controlled environment. In a non-cloud environment, it would be very much the same, though it would be configured more to our needs and our acceptance of risk than it would be to a more general.