6.4.3 Production data (live PANs) are not used for testing or development
6.4.3.a Observe testing processes and interview personnel to verify procedures are in place to ensure production data (live PANs) are not used for testing or development.
6.4.3.b Examine a sample of test data to verify production data (live PANs) is not used for testing or development.
Security controls are usually not as stringent in test or development environments. Use of production data provides malicious individuals with the opportunity to gain unauthorized access to production data (cardholder data).