💼 CM-7 (4) UNAUTHORIZED SOFTWARE | BLACKLISTING

• Contextual name: 💼 CM-7 (4) UNAUTHORIZED SOFTWARE | BLACKLISTING
• ID: /frameworks/nist-sp-800-53-r4/cm/07/04
• Located in: 💼 CM-7 LEAST FUNCTIONALITY

Description

The organization: CM-7 (4)(a) Identifies [Assignment: organization-defined software programs not authorized to execute on the information system]; CM-7 (4)(b) Employs an allow-all, deny-by-exception policy to prohibit the execution of unauthorized software programs on the information system; and CM-7 (4)(c) Reviews and updates the list of unauthorized software programs [Assignment: organization-defined frequency].

Similar

• Internal
  • ID: dec-c-ee9a5f4c

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags