Limiting What Programs Can Run In The Sandbox

Hi

I have the new CIS 6 installed and am just getting to grips with it.

Question:

Is it possible to limit what runs in the Sandbox to increase security ie Just Chrome Browser, everything else embargoed.

If so how do you do it?

Thanks

Terry