2.7 IG3

Control 2 / Inventory and Control of Software Assets

Allowlist Authorized Scripts

Think of it likeRunning only the chore instructions you have personally signed off on, so no one can slip a harmful task into the daily routine.

In plain English

Only approved automated instruction files (scripts) are allowed to run, so an attacker cannot execute their own commands on a device.