A method of controlling access to a computing resource of a computing device, wherein the computing device is communicatively coupled to a server device, the method performed by the server device comprising: the server device identifying an application category, with which one or more applications to be executed on the computing device is associated, wherein the application category is used by the server device for organizing applications available in an application store, and wherein the application category is determined based on a categorization of the one or more applications in the application store; generating a security policy containing one or more rules that specify whether one or more applications that have been categorized in the application store as belonging to the application category, are permitted to access the computing resource of the computing device; transmitting the security policy to the computing device, thereby enabling the computing device to enforce the security policy so that access to the computing resource is controlled by the rules for the one or more applications associated with the application category, characterized in that the method further comprises: receiving, from each of a plurality of computing devices, the plurality of computing devices comprising the computing device, data indicating that an identified application of the one or more applications has been associated with a user-assigned application category on the computing device sending the data; and re-categorizing the identified application by changing an association of the identified application to the user-assigned application category, if data indicating that the identified application of the one or more applications has been associated with the user-assigned application category is received from at least a threshold plurality of computing devices. the server device identifying an application category, with which one or more applications to be executed on the computing device is associated, wherein the application category is used by the server device for organizing applications available in an application store, and wherein the application category is determined based on a categorization of the one or more applications in the application store; generating a security policy containing one or more rules that specify whether one or more applications that have been categorized in the application store as belonging to the application category, are permitted to access the computing resource of the computing device; transmitting the security policy to the computing device, thereby enabling the computing device to enforce the security policy so that access to the computing resource is controlled by the rules for the one or more applications associated with the application category, characterized in that the method further comprises: receiving, from each of a plurality of computing devices, the plurality of computing devices comprising the computing device, data indicating that an identified application of the one or more applications has been associated with a user-assigned application category on the computing device sending the data; and re-categorizing the identified application by changing an association of the identified application to the user-assigned application category, if data indicating that the identified application of the one or more applications has been associated with the user-assigned application category is received from at least a threshold plurality of computing devices. receiving, from each of a plurality of computing devices, the plurality of computing devices comprising the computing device, data indicating that an identified application of the one or more applications has been associated with a user-assigned application category on the computing device sending the data; and re-categorizing the identified application by changing an association of the identified application to the user-assigned application category, if data indicating that the identified application of the one or more applications has been associated with the user-assigned application category is received from at least a threshold plurality of computing devices.