Unauthorized Software — Deny-by-exception

Parent: CM-7

Description

a. Identify [organization-defined parameter]; b. Employ an allow-all, deny-by-exception policy to prohibit the execution of unauthorized software programs on the system; and c. Review and update the list of unauthorized software programs [organization-defined parameter].

Mapped SPARTA techniques

22 techniques

DE-0007 Evasion via RootkitST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0008 Evasion via BootkitST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0009 Exploit Code FlawsST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0009.01 Flight SoftwareST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0009.02 Operating SystemST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0009.03 Known Vulnerability (COTS/FOSS)ST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0010 Malicious CodeST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0010.01 RansomwareST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0010.02 Wiper MalwareST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0010.03 RootkitST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0010.04 BootkitST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0006 Modify Communications ConfigurationST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0006.01 Software Defined RadioST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0006.02 TransponderST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0001 Compromise Supply ChainST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0001.01 Software Dependencies & Development ToolsST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0001.02 Software Supply ChainST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0002 Compromise Software Defined RadioST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0007 Compromise Ground SystemST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0007.01 Compromise On-Orbit UpdateST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
PER-0002 BackdoorST0005
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
PER-0002.02 Software BackdoorST0005
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.

Cite as SafeMode Space, nist-80053-rev5 CM-7(4).

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.

# Description

›Mapped SPARTA techniques

22 techniques

Description

Mapped SPARTA techniques