A communication system employable with an enterprise that provides applications for a user through a communication device, and method of operating the same. In one embodiment, the communication system includes a policy/user database that stores policies across an enterprise related to the user and the communication device for access to the applications within the enterprise. The communication system also includes a security server that authenticates access of the communication device to the applications based on the policies. The communication system also includes a control server that approves and controls access of the communication device to the applications based on authentication from the security server. The communication system still further includes an audit/traceability server that provides a record of transactions for the access by the communication device to the applications and provides an alert in real time when approval is denied.