What this control covers
Ensure only fully supported browsers and email clients are allowed to execute in the enterprise, only using the latest version of browsers and email clients provided through the vendor.
Why it matters
This is a foundational control: failure here typically magnifies impact across every other safeguard.
How to implement
This is a policy / process control with no single technical implementation. Document the procedure, assign an accountable owner, and review on the cadence set by your ISMS / GRC programme.
Evidence to collect
vendor_risk_management— See the iCompaas Evidence library for the canonical source for this evidence type.
Third-party risk management evidence (assessments, contracts, due diligence) shows supplier oversight. Focus: Ensure Use of Only Fully Supported Browsers and Email Clients.
Quick checklist
- Ensure — Version / Email
- Ensure Use — Version / Email
- Protect — Version / Email