NIST SP 800-167 Guide to Application Whitelisting
Section 3: Planning and implementation of application whitelisting – NIST SP 800-167 Guide to Application Whitelisting

NIST SP 800-167 Guide to Application Whitelisting 3.1c: Cover every end user device type, with a waiver and risk process for platforms that cannot be whitelisted

What does 3.1c require?

Because one product rarely serves every operating system, the organisation ensures an effective solution is identified for each type of end user device whose applications must be monitored, acquiring several products or replacing older devices where needed, and creates a waiver and risk management process for unusual cases. Mobile devices are whitelisted only where they are tightly managed and limited to an enterprise app store; industrial control systems, which favour availability, are analysed and tested carefully before whitelisting is applied.

Maintained by Gerard Blokdyk

Other controls in Section 3: Planning and implementation of application whitelisting – NIST SP 800-167 Guide to Application Whitelisting

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.