Ji is a chief information security officer (CISO) with MARco and has determined that her organization must only use a list of nine specific applications, and no others. What is this list of allowed-only software called?

Domain 7: Security Operations Practice Questions 
Questions relating to the following topics are included in this domain: 
Understanding and complying with investigations
Proper logging and monitoring activities
Performing configuration management 
Applying fundamental security concepts
Conducting resource protection and incident management