graphgrc

SCF - IAC-20.3 - Use of Privileged Utility Programs

Mechanisms exist to restrict and tightly control utility programs that are capable of overriding system and application controls.

Mapped framework controls

ISO 27002

Control questions

Does the organization restrict and tightly control utility programs that are capable of overriding system and application controls?