CCI-001774

Employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs on the system.