NIST SP 800-171A - Assessing Security Requirements for Controlled Unclassified Information (CUI)
171A 03.04 Configuration Management

NIST SP 800-171A - Assessing Security Requirements for Controlled Unclassified Information (CUI) 171A-03.04.08: Authorized Software - Allow by Exception

Determines whether a deny-all, permit-by-exception policy for software execution is defined and enforced, and whether the authorized list is reviewed.

Other controls in 171A 03.04 Configuration Management

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-171A - Assessing Security Requirements for Controlled Unclassified Information (CUI) controls