Mechanisms exist to restrict software library privileges to those individuals with a pertinent business need for access.
Does the organization restrict software library privileges to those individuals with a pertinent business need for access?