Application allow listing

The organization must have list of approved applications, and application sources, that are allowed to be used on the organization's endpoint devices.

The organization should, if possible, execute management of approved software using automation for example with policies from mobile device management system.

Only software approved by the organization can be run on the devices. The organization should:

• Actively approve software before it is deployed
• Maintain a list of approved software
• Prevent users from installing unapproved software
• Create a list of separately allowed extensions
• Unauthorized extensions should be blocked