What it means
Unauthorized software management identifies, evaluates, removes, blocks, or formally approves software that is not permitted for the device or environment.
Why it matters
Unmanaged software can introduce vulnerabilities, data transfer paths, licensing risk, persistence, and unsupported dependencies.
Practical focus
- Maintain an approved software inventory
- Detect installed and executed software
- Define exception and removal workflows
- Investigate recurring unauthorized installation
Common mistakes
- Blocking only by filename
- Removing software without understanding business use
- Ignoring browser extensions and scripts
- Keeping an approved list that is never reviewed
Certification relevance
This subject appears in or supports the following certification bodies of knowledge: