Your organization recently purchased a mixture of iOS and Android devices for use by the organization's management team. What is the BEST approach to defined and enforced app whitelists for these devices?