100% whitelisting. If CIT hasn't allowed it, it won't run.

• Even run-alone apps won't work unless permitted (such as putty.exe).
• CIT makes tools available so IT professionals can use to package (and maintain) any application, which CIT then hosts.

If Admin access required for an install, most end-users can't install . Otherwise, anything is allowed.new software.

However, if software can just be used without installation, user can run it. For example, Ex: Putty.exe will work.

Can run in audit-only mode to first learn of potential impact.

See below idea for more.