Mechanisms exist to restrict and tightly control utility programs that are capable of overriding system and application controls.
Does the organization restrict and tightly control utility programs that are capable of overriding system and application controls?