entity that is responsible for the security management and operation of applications, common files and other entities such as OBE/WAE, installers and operators