Cloud service customer: where utility programs are permitted, identify those to be used in its cloud computing environment and ensure they do not interfere with the controls of the cloud service. Cloud service provider: identify the requirements for any utility programs used within the service, and ensure that any use of utilities capable of bypassing normal operating or security procedures is strictly limited to authorised personnel and is regularly reviewed and audited.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.