← CIS Controls v8 in plain English

9.4 IG2

Control 9 / Email and Web Browser Protections

Restrict Unnecessary or Unauthorized Browser and Email Client Extensions

Think of it likeRemoving unnecessary gadgets from your home that could be used to break in.

In plain English

The family removes or disables any unnecessary or unauthorized tools (browser and email extensions) that could be exploited to compromise their security.

Related CSF subcategories (unofficial mapping)