A.8.7 Audit Checklist

When to use this

Use this checklist during an internal audit of malware protection deployment, update status, scanning, infection response, and user awareness.

Related controls

• A.8.7 Protection Against Malware
• A.8.7 Audit Evidence Pack
• Malware Protection Standard
• Malware Protection Coverage and Update Register
• Malware Infection Response Record
• Malware Awareness Checklist

Audit checklist

• Review malware protection standard.
• Review coverage and update register.
• Sample endpoints, servers, mobile devices, and cloud workloads where relevant.
• Check update/signature/engine status.
• Check real-time or scheduled scan settings.
• Review email, web, file, download, or removable media controls.
• Review malware alerts and quarantine logs.
• Sample infection response records.
• Verify cleaning/rebuild verification evidence.
• Review malware awareness training records.
• Interview users about suspicious links, downloads, fake prompts, and reporting.

Findings table