PFAC vs OOCU_RESP

Hi all,

What is the better way to maintain a rule in locked client (in a security measurement) ?

Is it better to create a transport in DEV (PFAC) or to make a change directly in PRD (OOCU_RESP)

Thanks,

Julia.