Its a very open/generalized question-
However there are multiple place in the network where you can disallow a particular PLMN to come to the network simple way is protect it at HSS or MME where any visited PLMN is first checked and if it is in the grey list then just disallow.
