Identify the document requiring removal of custom application accounts, user IDs and/or passwords before the system goes into production or is released to customers.
Identify the responsible personnel interviewed who confirm that custom application accounts, user IDs and/or passwords are removed before the system goes into production or is released to customers.