Users at an organization have been installing programs from the Internet on their workstations without first receiving proper authorization. The organization maintains a portal from which users can install standardized programs. However, some users have administrative access on their workstations to enable legacy programs to function properly. Which of the following should the security administrator consider implementing to address this issue? 

Answer options:

A. Application code signing
B. Application whitelisting
C. Data loss prevention
D. Web application firewalls

B