Control: ism-1424; Revision: 4; Updated: Mar-22; Applicability: ALL; Essential Eight: N/A ​

Web applications implement Content-Security-Policy, HSTS and X-Frame-Options via security policy in response headers.