Standards should be in place to control the use of utility programs. Utility programs facilitate the management of disk drives, printers, and other operating system resources. Utility programs often exist as part of an operating system, and provide tools for program debugging, file maintenance, and corrupt data correction. Utility programs can allow a user to create, modify, move, rename, copy, or delete code and data from program libraries and data files. Therefore, management should strictly control the use of the programs.
Organizations should restrict the use of utility programs with logical access controls or remove the utilities from program libraries, place them under dual control, and load them only when necessary. Management should exercise caution to ensure the removal of a utility does not adversely affect other systems or applications.