PR.PS-05 Installation and execution of unauthorized software are prevented

Statement

Installation and execution of unauthorized software are prevented

Guidance

When risk warrants it, restrict software execution to permitted products only or deny the execution of prohibited and unauthorized software

Guidance

Verify the source of new software and the software's integrity before installing it

Guidance

Configure platforms to use only approved DNS services that block access to known malicious domains

Guidance

Configure platforms to allow the installation of organization-approved software only

1. Overview

1.1 References

• 6.7 Network security
• 6.9 Protection against malicious and unauthorised software

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final