My 2 pennies worth..
Reading some of the comments i find quite concerning and demonstraights a lack of understanding from various parties involved. If your IT company have made the decision to blanket ban an application because their argument is that MSA uses Macros or VBA which may lend itself to be exploited resulting in data being corrupt, leaked or encrypted and/or held to ransom then what this suggests to me is that the IT Company/Manager currently providing an IT support service is placing limitation on you because they simply have a lack of knowledge and understanding. Reflected also is the fact that if Management have agreed to this blanket ban/limitations then they have been ill advised. This is typical of what I see in industry and when my skills are called upon to find a solution most of amenable resolve is found in simple communication with real understanding of the threat, the consiquence the restriction proposed has to business and a clear move forward plan. Most IT companies when brought to the table with Appication designers, Management and someone with the a broad spectrum of skill set to challenge all argument is all that's needed to resolve the issue you present here. I have never been unsuccessful yet in argument however I've been doing this for many years. Developers should never feel the IT department is working agains them. Any IT company worth their salt will be happy to be part of the solution not the problem.