History

Priority

should

Nov 2018

Removed

Replaced by security controls 1503 and 1508.

2017

Users and system administrators should be restricted to executing a subset of approvedprograms, DLLs, scripts and installers based on their specific duties.

Control Text Changed. No public explaination.

2015

Agencies should restrict users and system administrators to a subset of approved programs,DLLs, scripts and installers based on their specific duties.

2010

Agencies should restrict a system user’s rights in order to permit them to only execute a specific set ofpredefined executables as required for them to complete their duties.