Caging the Malicious Insider Application

The applications we need to run inside our organizations can turn malicious, so how can we architect for this?

application insider malicious malicious insider