A6.2.1: Which internet browsers do you use, and which versions?
Please list your internet browser(s). The version is required.
Source: IASME Cyber Essentials Danzell question set v16.3
A6.2.1 needs every internet browser installed on in-scope devices, with its version, so the assessor can confirm each is supported. IASME's example is 'Chrome Version 124, Safari Version 15'. Give the current major version on the day you submit, for example Chrome, Edge, Firefox and Safari, and confirm they update automatically.
Is A6.2.1 an automatic fail?
No. A6.2.1 is not an automatic-fail question. A non-compliant or unclear answer may be returned by the assessor for more information, but the requirement behind it must still be met before the assessment can pass.
- Answer type
- Notes a notes question, answered in free text
- IASME guidance
- Please list all internet browsers installed on your devices, so that the Assessor can understand your setup and verify that they are in support. For example: Chrome Version 124, Safari Version 15.
- Requirement enforced
You must make sure that all software in scope is kept up to date. All software on in-scope devices must be licensed and supported.
- Outcome if non-compliant
- May be returned for more information; not an automatic fail, but the requirement must still be met
- Related questions
- A6.2A6.2.2Back to the security update management control
What does A6.2.1 ask?
A6.2.1 asks: “Please list your internet browser(s). The version is required.”
A6.2.1 asks you to list your internet browsers, and says the version is required. The guidance asks for all browsers installed on your devices so the assessor can understand your setup and verify they are in support, with the example 'Chrome Version 124, Safari Version 15'.
Browsers release security updates every few weeks, so a version number from months ago looks out of date. Give the version on the day you submit and state that auto-update is on (A6.5.1). Check support status on the Chrome, Edge and Firefox pages.
What should you write in the notes field for A6.2.1?
Write two to four specific sentences for A6.2.1: what you do, who owns it, how often it happens and the record that proves it.
A model answer to adapt. Replace everything in square brackets with your own facts, and delete anything that is not true.
Microsoft Edge [version], Google Chrome [version], Mozilla Firefox [version] on Windows; Safari [version] on macOS and iOS; Chrome [version] on Android. All browsers auto-update, managed by [Intune / Google Admin]. Versions checked on [date].
Why do applicants fail A6.2.1?
A common reason applicants fail A6.2.1: copying the example versions from the guidance, which are long out of date.
- Listing only the main browser and forgetting Firefox or Chrome installed by individual users.
- Safari versions tied to an old macOS or iOS release that no longer receives updates.
- Leaving out the version, which the question requires.
How do you fix a failing A6.2.1 answer?
If your answer to A6.2.1 would not pass today, fix the control first and then write the answer. In order:
- List every browser installed on in-scope devices, including ones users installed themselves.
- Give the current version on the day you submit.
- Turn on and enforce auto-update, and uninstall browsers nobody needs.
How do assessors check A6.2.1?
What evidence should you keep for A6.2.1?
The self-assessment does not ask you to upload evidence, but the assessor can ask for clarification, a director signs the attestation, and Cyber Essentials Plus tests the same controls. Keep this on file for A6.2.1:
- A dated browser version report from your MDM, and the auto-update policy.
Where to go next
- Google ChromeSupport dates
- Microsoft EdgeSupport dates
- Mozilla FirefoxSupport dates
- Is it supported?Check a product's support status
- CE Plus test 2: authenticated patch scanHow the 14-day rule is tested
- Security Update Management requirementsThe control this question tests
- All A6 questionsSecurity update management
- Cyber Essentials checklistThe evidence to gather for every question
Other A6 questions
- A6.1A6.1Yes/NoAre all operating systems on your devices supported by a vendor that produces regular security updates and vulnerability fixes?Yes/No
- A6.2A6.2Yes/NoIs all the software on your devices supported by a supplier that produces regular vulnerability fixes for any security problems?Yes/No
- A6.2.2A6.2.2NotesPlease list your malware protection softwareNotes
- A6.2.3A6.2.3NotesPlease list your email applications installed on end user devices and servers.Notes
Frequently asked questions
A6.2.1 in the 2026 Danzell Cyber Essentials question set asks: "Please list your internet browser(s). The version is required." It is a notes question, answered in free text.
A6.2.1 needs every internet browser installed on in-scope devices, with its version, so the assessor can confirm each is supported. IASME's example is 'Chrome Version 124, Safari Version 15'. Give the current major version on the day you submit, for example Chrome, Edge, Firefox and Safari, and confirm they update automatically.
No. A6.2.1 is not an automatic-fail question. A non-compliant or unclear answer may be returned by the assessor for more information, but the requirement behind it must still be met before the assessment can pass.
The question says the version is required. Give the major version current on the day you submit, and state that the browsers update automatically.
Internet Explorer 11 is retired and unsupported on current Windows versions. If it remains enabled or installed on any in-scope device, remove or disable it.
Would you pass the 2026 question set?
Answer 24 yes or no questions, built by the assessors who mark Cyber Essentials, and get a readiness score in about five minutes, with any auto-fail questions you miss flagged first in your results.
- IASME Certification Body
- CREST accredited
- IASME fee included
- UK offices in Leeds, Newcastle, London and Edinburgh