Mon – Fri: 08:00 – 18:00 02 8883 3377
Client support portal

Application control

Only approved software runs. Everything else is blocked.

Application control is first on ASD's Essential Eight list for good reason: if malware can't run, it can't do damage. We build an allowlist of the software your organisation actually uses, block everything else, and give staff a quick, simple way to request new tools, so security improves without slowing anyone down.

Book a security review 02 8883 3377

What's included

Application Control

  • Discovery first

    We record what runs across your devices before blocking anything, so legitimate tools aren't caught out.

  • Allowlisting policies

    Rules built on trusted publishers, paths and file hashes, using Microsoft App Control for Business or a dedicated platform.

  • Limits on approved apps

    Approved software restricted in what it can reach, so a compromised program can't get to your files or the internet.

  • Script and macro control

    PowerShell, scripts and Office macros restricted to what your organisation genuinely needs.

  • Quick approval requests

    Staff request new software in a click, and we review and approve legitimate requests promptly.

  • Audit trail and evidence

    Blocked and allowed activity logged, with reporting that supports your Essential Eight maturity evidence.

The outcome

What changes for you.

  • Ransomware can't launch
  • Unapproved software stays off devices
  • The Essential Eight's top control in place
  • Staff still get the tools they need

FAQ

Common questions.

Something else on your mind? Call us and talk to an engineer, not a salesperson.

02 8883 3377
Won't application control get in the way?

Done badly, it can. That's why we start in audit mode, learn what you use and pilot with a small group before enforcing anything. Requests are handled quickly so work isn't held up.

Isn't antivirus enough?

Antivirus looks for known threats. Application control blocks anything that hasn't been approved, including brand-new malware that no antivirus product has seen yet.

When does the Essential Eight require it?

From Maturity Level One, application control is expected on workstations, starting with the user profile and temporary folders that attackers use most. Higher maturity levels extend it to servers and more locations.

Related services

Security review

Let's talk about your IT and security.

Our security review assesses your environment against the Essential Eight and best practice, ranks the biggest risks and gives you a practical, costed plan to fix them, in plain English.

Book a review 02 8883 3377