Some time ago I wrote a blogpost on how to enforce your tracking strategy:
I did this because one of my customers had a tracking strategy stating that by default all tracking in the production environment should be disabled. The problem was that it was difficult to enforce this strategy. New applications were put into production with tracking enabled or tracking was enabled for troubleshooting reasons never to be disabled again. The only method they had to enforce this strategy was to manually check the tracking settings. Since they have a lot of artifacts this took about an hour of clicking (and was extremely boring).