Govern discovered apps - Microsoft Defender for Cloud Apps
Implementation Effort: Medium: Customer IT and Security Operations teams need to drive projects to review, sanction, and unsanction apps, and potentially integrate with existing security appliances.
User Impact: Medium: A subset of non-privileged users may need to be notified of changes, especially if certain apps are unsanctioned and alternatives are suggested.
Overview
The "Govern discovered apps" feature in Microsoft Defender for Cloud Apps allows organizations to manage and secure their environment by sanctioning safe apps and unsanctioning risky ones. This capability fits into the Zero Trust framework by enabling continuous monitoring and control over app usage, ensuring that only trusted applications are used within the organization.