NIST SP 800-167 Guide to Application Whitelisting
Section 3: Planning and implementation of application whitelisting – NIST SP 800-167 Guide to Application Whitelisting

NIST SP 800-167 Guide to Application Whitelisting 3.3a: Prototype test functionality, management, logging, performance and the security of the implementation

What does 3.3a require?

A prototype is implemented and tested on lab or test devices, and only solutions in the final stage of testing touch production. Testing verifies application control functionality (allowing whitelisted, blocking blacklisted, detecting modification) by installing patches, hand-modifying executables and attempting circumvention; management, including ease of configuration at scale, patching the agent, changing algorithms and key sizes, key management and whitelist maintenance under patching; logging, alerting and data management against policy; performance under normal and peak load across devices, operating systems and applications; and the security of the implementation, with vulnerability assessment of the components for high-security organisations.

Maintained by Gerard Blokdyk

Other controls in Section 3: Planning and implementation of application whitelisting – NIST SP 800-167 Guide to Application Whitelisting

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.