The organization (or information system) enforces explicit rules governing the installation of software by users.