Control of End-User Computing

At our company, we have sophisicated users who at times will develop and roll-out end-user computing solutions (Access D/B’s etc).
One concern of mine is the control of these and co-ordination of this aspect of Information Systems. We (MIS) have been bit aready by having a mission critical application software where the original source (Access .mdb file are missing) only have .mde files. Question: Is there a white-paper on the aspect of computing control.