Malware Awareness Checklist

When to use this

Use this checklist when designing or reviewing user awareness content for malware prevention and reporting.

Related controls

• A.8.7 Protection Against Malware
• A.6.3 Information Security Awareness Education and Training
• A.6.8 Information Security Event Reporting

Awareness checklist

• Suspicious links and attachments covered.
• Fake antivirus, fake update, and fake login prompts covered.
• Risky downloads and unofficial software covered.
• Unsafe websites and browser warnings covered.
• Unexpected password requests covered.
• Reporting channel explained.
• Examples are realistic for the organization.
• Training completion is recorded.
• Effectiveness is checked through quiz, interview, or simulation.

Review table