PR.PS-05 prevents the installation and execution of unauthorized software by restricting platforms to approved applications and verifying software integrity before use. This includes using approved DNS services to block malicious domains and limiting execution to permitted products where risk warrants. It reduces the risk of malware or unvetted software compromising systems.

This subcategory strengthens control by enforcing a secure software environment, aligning restrictions with organizational risk tolerance. It ensures only trusted, necessary software operates, minimizing vulnerabilities. PR.PS-05 locks down platforms against unauthorized changes.