Validate whether or not the app is critical to your Firm before considering any containment steps. Deactivate the application employing app governance or Microsoft Entra ID to stop it from accessing resources. Current application governance procedures may have already deactivated the app.