Cyber Essentials · derived mapping target
CE5.2Restrict execution to approved software
As an alternative or complement to anti-malware tooling, allow only vetted, trusted applications to run through application allow-listing, blocking unsigned or unapproved software from executing.
Mapping at a glance
CE5.2Restrict execution to approved softwareCyber Essentials
CE5.2 is covered by 5 Sekit CSF controls. Open in the full graph →
Mapped from the Sekit CSF
The Sekit controls that cover this requirement, lens by lens.
RCF-0060Shadow IT discovery · TechnicalRCF-0141Container security · TechnicalRCF-0150EDR/anti-malware · TechnicalRCF-0348Workload protection · TechnicalRCF-0426Patch/compensating controls (ICS) · Technical
ISO/IEC 27001:2022 counterparts
Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.
NIST CSF 2.0 counterparts
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Endpoint protection console
The antivirus or advanced protection (EDR) tool installed on devices, and proof that it is deployed and up to date across the fleet.
Device hardening baseline
The secure-configuration standard applied to devices when handed out (default settings, disabled services) and how compliance is checked.
From the Sekit evidence catalog
Related controls
Via the shared Sekit CSF topic, not the framework's own index.
Ask Sekura: “What evidence proves CE5.2?”
Also via MCP, free with account