NIST SP 800-53: CM-7 Least Functionality

NIST SP 800-53: CM-7 Least Functionality

NIST resource that defines requirements for configuring information systems to provide only essential capabilities such as restricting / blacklisting software.