By protecting load modules, your installation can establish controls over who can run certain programs and can, in turn, treat those programs as assets. You can protect individual load modules (programs) by creating a profile for the program in the RACF PROGRAM general resource class. A program that is protected by a profile in the PROGRAM class is called a controlled program. When RACF program control is activated on your system, OCEP also requires the following program libraries to be program-controlled:

• Language Environment, which includes the C/C++ run-time libraries
• Integrated Cryptographic Service Facility (ICSF), if it is used