A security team wants to implement compliance controls that only permits the installation of company-approved software on user laptops. Which of the following should the IT department deploy?

EDR (Endpoint Detection and Response) focuses on detecting and responding to threats on endpoints but does not primarily control software installation policies.

A VPN (Virtual Private Network) provides secure remote access to a private network but does not manage software installation on end-user devices.

Mobile Device Management (MDM) solutions allow organizations to centrally manage, secure, and configure mobile devices, including laptops. MDM can enforce policies like application whitelisting or blacklisting, ensuring that only company-approved software can be installed and run on user laptops, thereby meeting compliance requirements.

SaaS (Software as a Service) is a software delivery model where applications are hosted by a third-party vendor and made available to users over the internet, not a solution for managing software installations on client devices.