The source code must always be maintained in a source code repository with restricted access rights. The source code repository logs must be reviewed for anomalies regularly.