Task 02: Classify apps as sanctioned, unsanctioned, and assign owners

---

Security Architecture Team

1. On the same Cloud app catalog page, tag a risky app as Unsanctioned:

   1. In the upper-right corner of the table’s search box, enter AutogenAI.

   2. Select the checkbox for AutogenAI, then select Unsanction on the top bar.

      

   3. With AutogenAI still selected, select Tag app, then select Create app tag…

      

   4. For App tag name, enter Block-ShadowIT, check Add app tag to “AutogenAI”, then select Create.

      

2. Tag a business app as Sanctioned:

   1. In the upper-right corner of the table’s search box, enter OneDrive.

   2. Select the checkbox for Microsoft OneDrive, then select Sanction on the top bar.

      

   3. With Microsoft OneDrive still selected, select Tag app, then select Create app tag…

   4. For App tage name, enter Approved-Collab, check Add app tag to “Microsoft OneDrive”, then select Create.

---

Security Engineering and Administration

Maintain the App owners list.

1. In the leftmost pane, go to Cloud apps > Cloud app catalog.

2. In the upper-right corner of the table’s search box, enter OneDrive.

3. Select the checkbox for Microsoft OneDrive.

4. On the top bar select Tag app, then select Create app tag…

   

5. For App tage name, enter Owned by: ICT, check Add app tag to “Microsoft OneDrive”, then select Create.

6. In the upper-right corner of the table’s search box, enter AutogenAI.

7. Select the checkbox for AutogenAI.

8. On the top bar select Tag app, then select Owned by: ICT.

   

---

SOC Analyst

1. Near the top of the page, select the Discovered apps tab.

2. Review the list and verify the tag details for Microsoft OneDrive.

   

3. Select any empty space on the line for Microsoft OneDrive to expand its details.

4. At the top of the pane, select Export > Export data, to share it with the CISO and Architecture team, when requested.