Requirement
"The use of utility programs that can be capable of overriding system and application controls shall be restricted and tightly controlled."[1]
Explanation
Establish a list of approved maintenance tools. This can be specified in your IT standard operating procedures. Examples of maintenance tools include network packet sniffers and software used to deploy updates to your systems. Only allow your system admins to use approved tools. Unapproved tools may be malicious and can damage your environment.
