CCI-001767
CCI-001767 Definition
The organization employs an allow-all, deny-by-exception policy to prohibit the execution of unauthorized software programs on the information system.
| Status | |
| Type | CheckType.technical |
Master Assessment Datasheet
Implementation Guidance
Within the DoD, this control cannot be implemented.
Validation Procedures
Within the DoD, this control cannot be implemented.
Compelling Evidence
1.) Signed and dated system security plan (SSP)