diff --git a/src/backend/Cps.CaseManagement.Api/host.json b/src/backend/Cps.CaseManagement.Api/host.json
index 04768645..d0965157 100644
--- a/src/backend/Cps.CaseManagement.Api/host.json
+++ b/src/backend/Cps.CaseManagement.Api/host.json
@@ -18,7 +18,10 @@
                 "X-Content-Type-Options": "nosniff",
                 "Referrer-Policy": "strict-origin-when-cross-origin",
                 "Permissions-Policy": "geolocation=(), camera=(), microphone=()",
-                "Cache-Control": "no-store"
+                "Content-Security-Policy": "default-src 'self'; script-src 'self' 'sha256-ncLtqGHxHarNkEqAJUbCwLGSrXqPwYudiumEQ4AK8S0=' 'sha256-BPoIjakJkuOIlmzi0q7XeU457LSyZoWa7V21MRUvZBs=' 'sha256-jT76BHhOmoQsfVq+HY1SDcXD0JFYOBScX6kD0QMwRtg=' 'sha256-jCDmBkCTDNxbJ/71rDevXvW7+Jl02N31YJPDkRk18g8=' 'sha256-tqoBU151c41BjiDzCzWcbXJk0FwKKSO8qg8cRkdhojM='; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; frame-ancestors 'none'",
+                "Cache-Control": "no-store, no-cache, must-revalidate, proxy-revalidate",
+                "Pragma": "no-cache",
+                "Expires": "0"
             }
         }
     }