Detections
Analytics

800-53|CM-7(5)(b)

Title

AUTHORIZED SOFTWARE / WHITELISTING

Description

Employs a deny-all, permit-by-exception policy to allow the execution of authorized software programs on the information system; and

Reference Item Details

Category: CONFIGURATION MANAGEMENT

Family: CONFIGURATION MANAGEMENT

Audit Items

View all Reference Audit Items

NamePluginAudit Name
3.3 Set 'Turn on script execution' to 'RemoteSigned'WindowsCIS Microsoft Exchange Server 2013 Hub v1.1.0
3.3 Set 'Turn on script execution' to 'RemoteSigned'WindowsCIS Microsoft Exchange Server 2016 Hub v1.0.0
20.17 Ensure 'Deny-all, permit-by-exception policy to allow the execution of authorized software programs'WindowsCIS Microsoft Windows Server 2022 STIG v1.0.0 STIG MS
20.17 Ensure 'Deny-all, permit-by-exception policy to allow the execution of authorized software programs'WindowsCIS Microsoft Windows Server 2022 STIG v1.0.0 STIG DC
AIX7-00-003025 - AIX must employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs.UnixDISA STIG AIX 7.x v3r1
AOSX-13-000505 - The macOS system must be configured to disable the iCloud Calendar services.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-000507 - The macOS system must be configured to disable the iCloud Reminders services.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-000510 - The macOS system must be configured to disable iCloud Address Book services.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-000515 - The macOS system must be configured to disable the iCloud Mail services.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-000517 - The macOS system must be configured to disable the iCloud Notes services.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-000518 - The macOS system must cover or disable the built-in or attached camera when not in use.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-000520 - The macOS system must be configured to disable the system preference pane for iCloud.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-000521 - The macOS system must be configured to disable the system preference pane for Internet Accounts.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-000522 - The macOS system must be configured to disable the system preference pane for Siri.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-000523 - The macOS system must be configured to disable Siri and dictation.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-000531 - The macOS system must be configured to disable the iCloud Find My Mac service.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-000556 - The macOS system must disable Siri pop-ups.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-000557 - The macOS system must disable iCloud Back to My Mac feature.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-000558 - The macOS system must disable iCloud Keychain synchronization.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-000559 - The macOS system must disable iCloud document synchronization.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-000560 - The macOS system must disable iCloud bookmark synchronization.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-000561 - The macOS system must disable iCloud Photo Library - allowCloudPhotoLibraryUnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-000561 - The macOS system must disable iCloud Photo Library - com.apple.preferences.icloudUnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-000562 - The macOS system must disable iCloud Desktop And Documents.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-14-002012 - The macOS system must be configured to disable the iCloud Calendar services.UnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002013 - The macOS system must be configured to disable the iCloud Reminders services.UnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002014 - The macOS system must be configured to disable iCloud Address Book services.UnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002015 - The macOS system must be configured to disable the Mail iCloud services.UnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002016 - The macOS system must be configured to disable the iCloud Notes services.UnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002017 - The macOS system must cover or disable the built-in or attached camera when not in use.UnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002020 - The macOS system must be configured to disable Siri and dictation - Assistant AllowedUnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002020 - The macOS system must be configured to disable Siri and dictation - Ironwood AllowedUnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002031 - The macOS system must be configured to disable the system preference pane for iCloud.UnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002032 - The macOS system must be configured to disable the system preference pane for Internet Accounts - DisabledPreferencePanesUnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002032 - The macOS system must be configured to disable the system preference pane for Internet Accounts - HiddenPreferencePanesUnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002039 - The macOS system must disable Siri pop-ups.UnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002040 - The macOS system must disable iCloud Keychain synchronization.UnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002041 - The macOS system must disable iCloud document synchronization.UnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002042 - The macOS system must disable iCloud bookmark synchronization.UnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002043 - The macOS system must disable iCloud photo library - allowCloudPhotoLibraryUnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002043 - The macOS system must disable iCloud photo library - DisabledPreferencePanesUnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002043 - The macOS system must disable iCloud photo library - HiddenPreferencePanesUnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002049 - The macOS system must disable Cloud Document Sync.UnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002051 - The macOS system must be configured to disable the system preference pane for TouchID - DisabledPreferencePanesUnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002051 - The macOS system must be configured to disable the system preference pane for TouchID - HiddenPreferencePanesUnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002052 - The macOS system must be configured to disable the system preference pane for Wallet & ApplePay - DisabledPreferencePanesUnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002052 - The macOS system must be configured to disable the system preference pane for Wallet & ApplePay - HiddenPreferencePanesUnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002053 - The macOS system must be configured to disable the system preference pane for Siri - DisabledPreferencePanesUnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-002053 - The macOS system must be configured to disable the system preference pane for Siri - HiddenPreferencePanesUnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-15-002012 - The macOS system must be configured to disable the iCloud Calendar services.UnixDISA STIG Apple Mac OSX 10.15 v1r10