Roger Grimes: The No. 1 defensive measure any company can take is to prevent unauthorized programs from running on any computer. Whitelisting programs are notoriously hard to deploy in a corporate environment. Most people and most cultures won’t stand for being told what they can and can’t run, he says. Without total support from management, you won’t be able to get a whitelisting project off the ground. Grimes: Whitelisted is the only preventive measure that truly works, and everything else will not.”]
Source: https://www.csoonline.com/article/2611331/the-one-security-technology-that-actually-works.html