Confirm if the app is essential to the Corporation before thinking about any containment steps. Deactivate the app applying application governance or Microsoft Entra ID to circumvent it from accessing sources. Current application governance insurance policies might have presently deactivated the app