Security Think Tank: Ensure incident response in the face of inevitable messaging leaks

What criteria should organisations use to assess the security of smartphone messaging apps and how can they ensure only approved apps are used by employees?