Your company uses a whitelisting approach to manage third-party apps and add-ons. The Senior VP of Sales & Marketing has urgently requested access to a new Marketplace app that has not previously…

Your company uses a whitelisting approach to manage third-party apps and add-ons. The Senior VP of Sales & Marketing has urgently requested access to a new Marketplace app that has not previously been vetted. The company's Information Security policy empowers you, as a Google Workspace admin, to grant provisional access immediately if all of the following conditions are met:

• Access to the app is restricted to specific individuals by request

only.

• The app does not have the ability to read or manage emails.
• Immediate notice is given to the Infosec team, followed by the

submission of a security risk analysis report within 14 days. Which actions should you take first to ensure that you are compliant with Infosec policy?