Glossary: Security Controls and Change Management
The rule behind a deny list: anything not listed is allowed.
Deny listDefault deny