id: os_safari_disable
title: Disable Safari
discussion: |
  The Safari web browser _MUST_ be disabled to enforce use of an organization-approved, managed browser and to reduce the device's web-based attack surface.

  Disabling Safari removes the app from the Home Screen and prevents its use. This restriction requires a supervised device.
references:
  nist:
    cce:
      ios_27:
        - CCE-XXXX-X
      ios_26:
        - CCE-XXXX-X
    800-53r5:
      - CM-7
      - CM-7(1)
  bsi:
    indigo:
      ios_26:
        - ANNEX K
platforms:
  iOS:
    '27.0':
      supervised: true
    '26.0':
      supervised: true
      benchmarks:
        - name: indigo_base
          severity: high
        - name: indigo_high
          severity: high
    introduced: '4.0'
mobileconfig_info:
  - PayloadType: com.apple.applicationaccess
    PayloadContent:
      - allowSafari: false