← CIS Controls v8 in plain English

2.5 IG2

Control 2 / Inventory and Control of Software Assets

Allowlist Authorized Software

Think of it likeKeeping a strict guest list at the door: if a program is not on the approved list, it simply is not allowed to run.

In plain English

Only software explicitly on the approved list may execute; anything not pre-cleared is blocked by default rather than allowed until noticed.

Related CSF subcategories (unofficial mapping)