ESSENTIAL 2 . 2 Allow Only Authorised Software To Work Malicious software, more commonly called malware, infects a network in several ways. It may enter a network because a user — downloaded intentionally or unintentionally — it from a website/cloud application, or opened an email attachment that contained the malware. It may also be transferred into the network via a removable media device. How do you prevent such unauthorised entry from doing damage? By using application control, together with antivirus software. Application control is a security practice that restricts or blocks unauthorised (be it unwanted, untrusted or malicious) applications from running and authorised applications from doing unauthorised functions. In this way, application control helps to ensure confidentiality, integrity and availability of data used by and transmitted between applications.