Mechanisms exist to restrict the ability of non-privileged users to install unauthorized software.
Control Question
Assessment question for control validation
Does the organization restrict the ability of non-privileged users to install unauthorized software?
Supply Chain Risk Management (SCRM) Tiers
Applicable SCRM tier levels for this control
Tier 1 - Strategic
Tier 2 - Operational
Tier 3 - Tactical
Core Control Designations
Special designations and baseline inclusions
MAD: CFG-05
ESP Level 1: CFG-05
ESP Level 2: CFG-05
ESP Level 3: CFG-05