You have been tasked with providing a compensating control for a small IT web development company that operates under the premise that developers need access to production. Which one of the following choices do you think would be the BEST suggestion from you?