CFG-05
User-Installed Software
Description
Mechanisms exist to restrict the ability of non-privileged users to install unauthorized software.
Control Question
Does the organization restrict the ability of non-privileged users to install unauthorized software?
Control Metadata
Domain:
Configuration Management
Validation Cadence:
Annual
Evidence Request List:
E-AST-01 E-AST-21 E-IAM-02