To make an attribute read-only, a default must be selected - at least from Object - Attribute area.
When you indicate 'it is being used' - doesn't that imply that it needs to be updateable?
Potentially it could be moved to a 'pmo secure' page, where only pmo can update it, if that is what your concern is.