Allowlisting
Allowlisting inverts the default so that only approved software may run, rather than blocking things known to be bad.
It is among the most effective controls available and among the least deployed, because maintaining the list is genuine ongoing work and getting it wrong stops people working. Where the set of software is stable, servers, kiosks, industrial systems, it is enormously effective.
Checked against the primary source.