Under active development Content is continuously updated and improved · Last updated Feb 18, 2026, 2:55 AM UTC

03.04.08Application Execution Policy Assessment

>Control Description

Determine if: the frequency at which to review and update the list of authorized software programs is defined.; software programs authorized to execute on the system are identified.; a deny-all, allow-by-exception policy for the execution of authorized software programs on the system is implemented.

Ask AI

Configure your API key to use AI features.