APPROVED APPLICATIONS - MACOS (MacBook Air 15” M4 and Mac mini)
Productivity & Communication:
-
Microsoft Outlook (Microsoft 365 subscription)
-
Microsoft Word (Microsoft 365 subscription)
-
Microsoft Excel (Microsoft 365 subscription)
-
Microsoft PowerPoint (Microsoft 365 subscription)
-
Microsoft Teams (Microsoft 365 subscription)
-
Slack (team communication)
-
Zoom (video conferencing)
Browsers:
-
Safari (built-in with macOS)
-
Google Chrome (Version 148.0.7778.168 or later)
Development & Technical:
-
Visual Studio Code (code editing)
-
GitHub Desktop (version control)
-
MongoDB Compass (database management)
Cloud & File Management:
-
Microsoft OneDrive (Microsoft 365 subscription)
-
Dropbox (if used)
Business Tools:
-
Figma (design)
-
Miro (collaboration)
-
Loom (video recording)
-
DocuSign (document signing)
AI & Productivity:
-
Claude Desktop
-
Perplexity
-
ChatGPT (OpenAI)
Utilities:
-
Apple Passwords (built-in password manager)
-
NordVPN (network security)
Approval method: All applications from App Store or identified developers with valid code signatures. Gatekeeper enforces technical control.
APPROVED APPLICATIONS - iOS/iPadOS (iPhone 16 Pro Max, iPad A16)
Productivity & Communication:
-
Microsoft Outlook (App Store)
-
Microsoft Word (App Store)
-
Microsoft Excel (App Store)
-
Microsoft PowerPoint (App Store)
-
Microsoft Teams (App Store)
-
Slack (App Store)
-
Zoom (App Store)
Browser:
- Safari (built-in with iOS/iPadOS)
Cloud & File Management:
-
Microsoft OneDrive (App Store)
-
Dropbox (App Store - if used)
Business Tools:
-
Figma (App Store)
-
Miro (App Store)
-
Loom (App Store)
-
DocuSign (App Store)
Social Media (Business Use):
-
LinkedIn (App Store)
-
X/Twitter (App Store)
-
Instagram (App Store)
-
Threads (App Store)
-
YouTube (App Store)
-
Reddit (App Store)
-
TikTok (App Store)
-
Pinterest (App Store)
-
Medium (App Store)
-
Bluesky (App Store)
AI & Productivity:
-
ChatGPT (App Store - if installed)
-
Claude (App Store - if installed)
-
Perplexity (App Store - if installed)
-
Plaud (App Store - if installed)
Security:
-
Microsoft Authenticator (App Store - MFA)
-
Google Authenticator (App Store)
-
NordVPN (App Store)
Approval method: All applications must be installed from Apple App Store only. iOS/iPadOS enforces technical control - no sideloading permitted.
TECHNICAL CONTROLS ENFORCING APPLICATION APPROVAL
MacBook Air:
-
macOS Gatekeeper enabled and set to “App Store and identified developers”
-
System Integrity Protection (SIP) active
-
Unsigned applications blocked by default
-
Administrator approval required for any exceptions
iPhone & iPad:
-
iOS/iPadOS App Store is ONLY installation method
-
Sideloading disabled (no developer mode)
-
All apps code-signed by Apple
-
Users cannot install apps from other sources
APPROVAL PROCESS FOR NEW APPLICATIONS
-
User identifies need for new application
-
CEO reviews application: security, business need, vendor reputation
-
CEO verifies application is code-signed (Mac) or from App Store (iOS/iPadOS)
-
CEO approves installation
-
Application added to this approved list
-
User installs application
REMOVAL PROCESS
-
Applications are removed if:
-
No longer needed for business purposes
-
Vendor ends support or security updates
-
Security vulnerability identified
-
User no longer requires access
Quarterly reviews identify applications for removal.