Glossary: Vulnerability, Asset and Change Management

Allow list

Also written: allowlist, application allow list

A list that permits only the named items (programs, addresses, ports) and blocks everything else. A change may need an allow list update, for example when a payment provider gets new addresses.