SekitCrosswalk
ENES
Start free trial
Cyber Essentials · derived mapping target

CE5.2Restrict execution to approved software

As an alternative or complement to anti-malware tooling, allow only vetted, trusted applications to run through application allow-listing, blocking unsigned or unapproved software from executing.

Mapping at a glance
CE5.2Restrict execution to approved softwareCyber Essentials
RCF-0060Shadow IT discoveryAsset Management · TechnicalRCF-0141Container securityApplication Security · TechnicalRCF-0150EDR/anti-malwareEndpoint Security · TechnicalRCF-0348Workload protectionCloud Security · TechnicalRCF-0426Patch/compensating controls (ICS)OT/ICS Security · Technical

CE5.2 is covered by 5 Sekit CSF controls. Open in the full graph →

Mapped from the Sekit CSF

The Sekit controls that cover this requirement, lens by lens.

RCF-0060Shadow IT discovery · TechnicalRCF-0141Container security · TechnicalRCF-0150EDR/anti-malware · TechnicalRCF-0348Workload protection · TechnicalRCF-0426Patch/compensating controls (ICS) · Technical

ISO/IEC 27001:2022 · Annex A controls counterparts

Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.

A.8.16 Monitoring activitiesA.8.7 Protection against malwareA.8.9 Configuration managementA.5.9 Inventory of information and other associated assetsA.8.8 Management of technical vulnerabilitiesA.8.29 Security testing in development and acceptanceA.5.10 Acceptable use of information and other associated assets

NIST CSF 2.0 counterparts

PR.PS-02 Software maintainedDE.CM-01 Networks monitoredPR.PS-01 Configuration management appliedPR.IR-01 Networks protected from unauthorized accessPR.PS-04 Logs generated for monitoringID.RA-05 Inherent risk understoodID.AM-02 Software inventory maintainedID.AM-01 Hardware inventory maintainedID.AM-08 Assets managed through lifecycle

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Endpoint protection console
The antivirus or advanced protection (EDR) tool installed on devices, and proof that it is deployed and up to date across the fleet.
Device hardening baseline
The secure-configuration standard applied to devices when handed out (default settings, disabled services) and how compliance is checked.
From the Sekit evidence catalog

Related controls

Via the shared Sekit CSF topic, not the framework's own index.

CE2.1 Remove unnecessary accounts and softwareCE3.1 Use licensed and supported softwareCE3.2 Apply critical updates within 14 daysCE5.1 Operate a malware protection mechanism
Ask Sekura: “What evidence proves CE5.2?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk
  1. In Claude or ChatGPT, add a custom connector and paste this URL.
  2. Sign in with your email to finish. Free, read-only, no organization required.