Critical Control 7 - Email and Web Browser Protections

Minimize the attack surface and the opportunities for attackers to manipulate human behavior through their interaction with web browsers and email systems.

PR.PT-1 Audit/log records are determined, documented, implemented, and reviewed in accordance with policy

PR.PT-2 Removable media is protected and its use restricted according to policy

PR.PT-3 The principle of least functionality is incorporated by configuring systems to provide only essential capabilities

PR.PT-4 Communications and control networks are protected

PR.PT-5 Mechanisms (e.g., failsafe, load balancing, hot swap) are implemented to achieve resilience requirements in normal and adverse situations