A category describing the strength of the authentication process.
Sources:
NIST SP 1800-17b
under Authenticator Assurance Level
A list of applications and application components (libraries, configuration files, etc.) that are authorized to be present or active on a host according to a well-defined baseline.
Sources:
NIST SP 1800-10B
under application allowlisting
from
NIST SP 800-167 - Under "application whitelist"