CM-7.5: Authorized Software — Allow-by-exception

frequency at which to review and update the list of authorized software programs is defined;

software programs authorized to execute on the system are defined;