CCI-000307

The organization employs an allow-all, deny-by-exception authorization policy to identify software allowed to execute on the information system.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-000307.