1. A method of controlling access to a computing resource by applications executable on a computing device, the method comprising: identifying an application category with which one or more applications executable on the computing device is associated; providing, in a security policy, one or more rules that specify whether the one or more applications associated with the application category are permitted to access the computing resource on the computing device; and transmitting the security policy to the computing device; wherein when the security policy is enforced at the computing device, access to the computing resource by the one or more applications executable on the computing device that are associated with the application category is controlled by the one or more rules.