Malware
What is Malware?
Any software intentionally designed to cause damage to a computer, server, client, or computer network. Malware types include viruses, worms, trojans, ransomware, spyware, adware, and rootkits.
Terms that appear alongside malware
Each of these is named in at least one of the same controls as malware. The number is how many controls name both.
- anti malware 41 shared controls
- nist 15 shared controls
- vulnerability 12 shared controls
- cybersecurity 10 shared controls
- patch management 9 shared controls
- baseline 9 shared controls
- ransomware 8 shared controls
- access control 8 shared controls
Frameworks that govern malware
What the standards actually require on malware
Requirements naming malware across 6 standards, quoted from the control text.
Audit logs for the anti-malware solution are enabled and retained in accordance with Requirement 10.5.1.
5.3.4 · Audit logs for anti-malware enabled →Assessor tests that the device or web filter blocks malicious files when downloaded via browser from a controlled test URL.
CE-PLUS.4 · Malware Protection Test - Web Download →Configure production system components with malware protection as the policy prescribes, and where signature and behaviour based detection software is used, update its detection content at least once every day.
C5-OPS-05 · Protection Against Malware - Implementation →Deploy modern anti-malware solutions with cloud-delivered protection, real-time scanning, and behaviour monitoring.
ES-2 · Use modern anti-malware software →Malware detection. The company should deploy malware detection and prevention appropriate to IT and OT, recognising constraints on OT systems.
BIMCO-8.2 · Malware detection →Configure automatic updates for anti-malware signature files on all enterprise assets.
CIS-10.2 · Configure Automatic Anti-Malware Signature Updates →Questions people ask about malware
What is Malware?
Why is Malware important for compliance?
Which compliance frameworks address Malware?
Where can I learn more about Malware?
See how Malware applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.