Detections
Analytics
800-53|CM-7(4)
Title
UNAUTHORIZED SOFTWARE / BLACKLISTINGDescription
The organization:Supplemental
The process used to identify software programs that are not authorized to execute on organizational information systems is commonly referred to as blacklisting. Organizations can implement CM-7(5) instead of this control enhancement if whitelisting (the stronger of the two policies) is the preferred approach for restricting software program execution.Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Related: CM-6,CM-8,PM-5
Category: CONFIGURATION MANAGEMENT
Parent Title: LEAST FUNCTIONALITY
Family: CONFIGURATION MANAGEMENT
Baseline Impact: MODERATE
Audit Items
View all Reference Audit Items