Anti-Malware
What is Anti-Malware?
Software designed to detect, prevent, and remove malicious software such as viruses, worms, trojans, and ransomware from computer systems and networks.
Terms that appear alongside anti-malware
Each of these is named in at least one of the same controls as anti-malware. The number is how many controls name both.
- malware 41 shared controls
- application allowlisting 4 shared controls
- baseline 4 shared controls
- hardening 4 shared controls
- integrity 4 shared controls
- audit 3 shared controls
- patch management 3 shared controls
- secure boot 3 shared controls
Frameworks that govern anti-malware
What the standards actually require on anti-malware
Requirements naming anti-malware across 6 standards, quoted from the control text.
Audit logs produced by the anti-malware solution or solutions must be turned on and kept in line with Requirement 10.5.1. These logs let the entity confirm that updates and scans run as expected, that malware is found and dealt with, and trace how malware got...
5.3.4 · 5.3.4 Anti-malware audit logs enabled and retained →Manage anti-malware software from a central console. Implementation Groups: IG2 and IG3 (not in the IG1 baseline; applies from IG2 upward). Asset type: Devices. Security function: Protect.
cis-controls-v8-1::10.6 · Centrally Manage Anti-Malware Software →Individuals must be responsible for installing and maintaining any mandated BYOD firewalls and anti-malware software, and for applying operating system updates and patches to their device.
new-zealand-information-security-manual-nzism::21.4.10.C.14 · 21.4.10.C.14 User duty for firewall, anti-malware and patching →Deploy modern anti-malware solutions with cloud-delivered protection, real-time scanning, and behaviour monitoring.
ES-2 · Use modern anti-malware software →Set anti-malware signature files to update automatically on every enterprise asset.
CIS-10.2 · Configure Automatic Anti-Malware Signature Updates →All in scope devices must run anti malware software that is kept current, scans files on access and prevents execution of known malicious code.
CEP-MA-01 · Anti-Malware Deployment and Operation →Questions people ask about anti-malware
What is Anti-Malware?
Why is Anti-Malware important for compliance?
Which compliance frameworks address Anti-Malware?
Where can I learn more about Anti-Malware?
See how Anti-Malware applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.