03.14.02 Malicious Code Protection

This policy outlines the requirements for implementing and maintaining effective malicious code protection mechanisms across all systems and endpoints within the organization to safeguard sensitive information from threats such as malware, viruses, ransomware, and other malicious software. This policy applies to all employees, contractors, and third-party users who have access to or utilize organizational systems and data.

• A.03.14.02.ODP[01]: the frequency at which malicious code protection mechanisms perform scans is defined.
• A.03.14.02.a[01]: malicious code protection mechanisms are implemented at system entry and exit points to detect malicious code.
• A.03.14.02.a[02]: malicious code protection mechanisms are implemented at system entry and exit points to eradicate malicious code.
• A.03.14.02.b: malicious code protection mechanisms are updated as new releases are available in accordance with configuration management policy and procedures.
• A.03.14.02.c.01[01]: malicious code protection mechanisms are configured to perform scans of the system <A.03.14.02.ODP[01]: frequency>.
• A.03.14.02.c.01[02]: malicious code protection mechanisms are configured to perform real-time scans of files from external sources at endpoints or system entry and exit points as the files are downloaded, opened, or executed.
• A.03.14.02.c.02: malicious code protection mechanisms are configured to block malicious code, quarantine malicious code, or take other actions in response to malicious code detection.