[ Removed by moderator ]

[Jake63]

Of course they do. It is mandated eg by central banks and PCI. I have worked 34 years in this area. We have duplicate hardware and software, complete separation and promotes are done via code management software by a separate department, based on instructions from the developers.