&gt; Are there any best practices guides on this?<p>I&#x27;m not aware of any, but we did have quite a lot of procedures meant to mitigate this sort of things when I worked in banking.  For one, none of the developers had any sort of access to production machines.