Malware Protection Standard

When to use this

Use this standard to define minimum malware protection requirements for endpoints, servers, mobile devices, cloud workloads, email, web access, file uploads, and removable media.

Related controls

• A.8.7 Protection Against Malware
• A.8.1 User End Point Devices
• A.6.3 Information Security Awareness Education and Training

Standard requirements

Minimum checks

• Approved malware protection tools are defined.
• Coverage expectations are defined by system type.
• Update frequency and fallback manual update process are defined.
• Real-time or scheduled scanning requirements are defined.
• Infection response and escalation are defined.
• User awareness requirements are defined.