A list of discrete entities, such as hosts or applications that are known to be benign and are approved for use within an organization and/or information system.