Do not allow applications that are unsigned, have an invalid signature or do not match your organisations software whitelist.