CM-7.5: Authorized Software — Allow-by-exception

software programs authorized to execute on the system are defined;

frequency at which to review and update the list of authorized software programs is defined;