Island browser FAQs for third-party IT providers

Island is a secure enterprise browser based on the Chromium engine used only for accessing Birmingham City University (BCU) systems and data. It is intended to keep BCU's systems safe without installing anything intrusive on your devices.

We protect our BCU data by restricting access to within the Island browser.

Island also allows us to protect BCU identities from increasingly sophisticated online phishing kits and adversary-in-the-middle (AiTM) infrastructure targeting Multi-Factor Authentication (MFA) token theft.

It helps protect our partners by increasing the security of BCU accounts and preventing lateral movement resulting from any potential compromise of BCU systems.

Island allows secure access to BCU data from unmanaged devices without requiring:

• Endpoint agents
• VPN access
• Virtual Desktop Infrastructure (VDI) solutions.

This helps us collaborate securely while minimising impact on your environment.

No. Island browser is not a mobile device management platform, and does not provide:

• Device management
• Remote access
• File system visibility
• Monitoring of anything outside the Island browser.

Island controls only what happens inside the managed browser.

Island is only installed in the user context. It is not a system wide installation.

No. It works differently:

No. The Island enterprise browser is specifically intended to provide a similar level of protection to Mobile Device Management / Device Conditional Access without needing to enrol or manage personal or third-party devices with a mobile device management platform.

Island provides a clear separation between your organisation's systems and data and those of BCU.

Island browser allows us to prevent BCU accounts from directly logging into, and using, desktop applications on your devices, such as Outlook, Teams or other Microsoft applications, by applying device bound conditional access policies to BCU accounts. This means BCU accounts can only access these applications via the web versions available within the Island browser.

Additionally, Island browser does not allow downloads to local device storage, protecting your organisation from any potential threats coming from your staff's access to BCU accounts, systems or data, if they were to be compromised.

Island provides visibility only into security‑relevant browser activity, such as:

• Logins to BCU systems
• Access attempts
• Policy violations (e.g., blocked downloads)
• Basic device information (OS, make, model)

BCU does not capture browsing or activity outside Island.

Additional information can be provided on request.

No. Island is separate from your normal browser and cannot see any activity outside of the Island browser itself.

You can continue using Chrome, Edge, Safari, etc. as usual for any non-BCU related activity.

Island avoids the traditional risks and overheads:

• No access to your internal network
• No lateral‑movement risk
• Faster performance (local, not streamed)
• Rapid onboarding/offboarding
• Lower support and maintenance effort.

It gives application‑level access, not network access.

Controls apply only when accessing BCU data within the Island browser, including:

• Download and upload restrictions
• Copy/paste controls
• Screenshot blocking
• Browser extension management.

Controls are contextual and limited to BCU web applications.

Access to BCU systems can be revoked instantly, with no action required on your side:

• No uninstallation
• No configuration clean-up
• No certificate removal.

Yes. Island aligns with:

• ISO 27001
• SOC 2
• GDPR
• Zero‑Trust principles

• Install the app (BCU login required)
• Typically installs in minutes
• Usually no admin rights needed
• No system configuration changes required.