A method comprising: at a server computer, receiving data from a mobile communications device, the received data being associated with an application program (201, 203), and the received data being received after a determination, by the mobile communications device, that a local store at the mobile communications device does not include an assessment allowing or not allowing the application program (1203, 1205) to run on the mobile communications device; at the server computer, analyzing the received data by a known good component accessible by the server computer, the known good component containing only assessments allowing application programs to run on the mobile communications device; if the analysis of the received data by the known good component results in an assessment that the application program is allowed, then at the server computer, transmitting the assessment by the known good component to the mobile communications device allowing the mobile communications device to access the assessed application program; if, at the server computer, the analysis of the received data by the known good component does not result in an assessment that the application program is allowed, then, at the server computer, analyzing the received data by a known bad component accessible by the server computer, the known bad component containing only assessments not allowing application programs to run on the mobile communications device; and if, at the server computer, the analysis of the received data by the known bad component results in an assessment that the application program is not allowed, then, at the server computer, transmitting the assessment by the known bad component to the mobile communications device preventing the mobile communications device from accessing the application program. at a server computer, receiving data from a mobile communications device, the received data being associated with an application program (201, 203), and the received data being received after a determination, by the mobile communications device, that a local store at the mobile communications device does not include an assessment allowing or not allowing the application program (1203, 1205) to run on the mobile communications device; at the server computer, analyzing the received data by a known good component accessible by the server computer, the known good component containing only assessments allowing application programs to run on the mobile communications device; if the analysis of the received data by the known good component results in an assessment that the application program is allowed, then at the server computer, transmitting the assessment by the known good component to the mobile communications device allowing the mobile communications device to access the assessed application program; if, at the server computer, the analysis of the received data by the known good component does not result in an assessment that the application program is allowed, then, at the server computer, analyzing the received data by a known bad component accessible by the server computer, the known bad component containing only assessments not allowing application programs to run on the mobile communications device; and if, at the server computer, the analysis of the received data by the known bad component results in an assessment that the application program is not allowed, then, at the server computer, transmitting the assessment by the known bad component to the mobile communications device preventing the mobile communications device from accessing the application program.