Law / Frameworks / NIST CSF 2.0 / Protect

NIST CSF 2.0, ProtectPR.PS-05

Installation and execution of unauthorized software are preventedNIST Cybersecurity Framework, version 2.0, February 2024 (NIST CSWP 29), PR.PS-05

We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of 14 Nov 2026.

3: laws
2: jurisdictions
0: with court rulings behind them
0: not yet in force

Sector security regimes

2 laws, 1 jurisdiction

Jurisdiction	Law	What it asks, as read here
New York	DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks	The Department states that the regulation requires you to monitor the activity of authorized users and email and web traffic to block malicious content and protect against the installation of malicious code, and says that if you use AI-enabled products or services or allow personnel to use AI applications you should also consider monitoring for unusual query behaviors that might indicate an attempt to extract nonpublic information and blocking queries that might expose it to a public AI product or system.
New York	New York Department of Financial Services Cybersecurity Regulation, Malicious Code Protection and Class A Company Monitoring Solutions	Implement risk-based controls designed to protect against malicious code, including controls that monitor and filter web traffic and electronic mail to block malicious content.

Product security requirements

1 law, 1 jurisdiction

Jurisdiction	Law	What it asks, as read here
Cyprus	Security of Networks and Information Systems Law, Radio Equipment Cybersecurity Requirements	Support features ensuring that software can be installed on the radio equipment only once the compatibility of the combination of the radio equipment and the software has been demonstrated.

Full text of the NIST Cybersecurity Framework, public domain (a US government work). Every control of the framework.