It is a best practice to match an application or user to an appropriate use case and determine who can connect to a production Business Continuity Manager environment. Use the reject routing rule assigned as the default rule in the user mappings when a user does not match any other user mapping.
bcmadmin> routing update reject REJECT LOGON; Successfully updated routing 'reject'