CCI-001774

The organization employs a deny-all, permit-by-exception policy to allow the execution of authorized software programs on the information system.

Implementation Guidance

The organization being inspected/assessed configures the information system to deny-all and only permit by exception the execution of authorized software programs on the information system.

Validation Procedures

The organization conducting the inspection/assessment examines the information system to ensure that it is configured to deny-all and only permit by exception the execution of authorized software programs on the information system.

Compelling Evidence

1.) Signed and dated system security plan (SSP)

The controls below (if any) were marked by NIST as being related to CCI-001774.