2.9: Implement Application Whitelisting of Scripts

Control Statement

The organization’s application whitelisting software must ensure that only authorized, digitally signed scripts (such as *.ps1, *.py, macros, etc.) are allowed to run on a system.

[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]