CCI-001768

CCI-001768 Definition

Defines the frequency on which the list of unauthorized software programs will be reviewed and updated.

Status
Type	CheckType.policy

The controls below (if any) were marked by NIST as being related to CCI-001768.

Control	Description
CM-7(4)	The organization: (a): Identifies [one of ]; (b): Employs an allow-all, deny-by-exception policy to prohibit the execution of unauthorized software programs on the information system; and (c): Reviews and updates the list of unauthorized software programs [one of ].