← CIS Controls v8 in plain English

2.6 IG2

Control 2 / Inventory and Control of Software Assets

Allowlist Authorized Libraries

Think of it likeStocking the pantry only with pre-checked ingredients that every recipe draws from, so no tainted ingredient ends up in a meal.

In plain English

Only vetted shared code components (the building-block libraries programs borrow) are permitted to load, blocking any unapproved one.

Related CSF subcategories (unofficial mapping)