Malware
What is Malware?
Any software intentionally designed to cause damage to a computer, server, client, or computer network. Malware types include viruses, worms, trojans, ransomware, spyware, adware, and rootkits.
Terms that appear alongside malware
Each of these is named in at least one of the same controls as malware. The number is how many controls name both.
- anti malware 41 shared controls
- nist 15 shared controls
- vulnerability 12 shared controls
- cybersecurity 10 shared controls
- patch management 9 shared controls
- baseline 9 shared controls
- ransomware 8 shared controls
- access control 8 shared controls
Frameworks that govern malware
What the standards actually require on malware
Requirements naming malware across 6 standards, quoted from the control text.
Audit logs produced by the anti-malware solution or solutions must be turned on and kept in line with Requirement 10.5.1. These logs let the entity confirm that updates and scans run as expected, that malware is found and dealt with, and trace how malware got...
5.3.4 · 5.3.4 Anti-malware audit logs enabled and retained →Malware protection is to be implemented and backed by appropriate user awareness. Purpose: protect information and associated assets from malware.
iso-27002-2022::8.7 · Protection against malware →Agencies must scan each BYOD device for malware and sanitise it as needed before it is allowed to reach agency data.
new-zealand-information-security-manual-nzism::21.4.11.C.11 · 21.4.11.C.11 Malware check before BYOD accesses agency data →Keep endpoint protection and scanning software that detects and deals with malware up to date and managed; give onboard computers the same protection as computers in the shore office, with anti-malware installed and updated on all work and personal devices on...
BIMCO-8.2 · Malware detection →Manage anti-malware software from a central console. Implementation Groups: IG2 and IG3 (not in the IG1 baseline; applies from IG2 upward). Asset type: Devices. Security function: Protect.
cis-controls-v8-1::10.6 · Centrally Manage Anti-Malware Software →Assessor tests that the device or web filter blocks malicious files when downloaded via browser from a controlled test URL.
CE-PLUS.4 · Malware Protection Test - Web Download →Questions people ask about malware
What is Malware?
Why is Malware important for compliance?
Which compliance frameworks address Malware?
Where can I learn more about Malware?
See how Malware applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.