Skip to content

Virus

What is Virus?

A type of malicious software that attaches itself to a legitimate programme or file and spreads when the infected file is executed. Unlike worms, viruses require human action to propagate.

Information Security

What the standards actually require on virus

Requirements naming virus across 6 standards, quoted from the control text.

Network operators must formulate emergency response plans for cybersecurity incidents and promptly address security risks such as system vulnerabilities, computer viruses, cyberattacks and network intrusions;

china-cybersecurity-law-csl::27 · Art. 27 Emergency response plans, prompt handling of vulnerabilities, viruses, attacks and intrusions, activation and reporting on incidents →

The practitioner follows the Guidelines: Registered health practitioners and students in relation to blood-borne viruses, which require compliance with the Communicable Diseases Network Australia's national guidelines for managing healthcare workers living wit...

dental-board-of-australia-infection-prevention-and-control-guidance-2024::OB.3 · Blood-borne viruses: follow the Board's guidelines and the CDNA national guidelines →

Measures to protect systems against embedded viruses or malware should be considered (Table B1, 10.1: a virus embedded in communication media infects vehicle systems).

unece-wp-29-r155::A5-M14 · Annex 5 M14 Measures to protect systems against embedded viruses or malware should be considered →
ISO 27002:20225 controls

Utility programs able to override system and application controls are to have their use limited and tightly controlled. Purpose: prevent utility programs from undermining system and application security controls.

iso-27002-2022::8.18 · Use of privileged utility programs →
Saudi NCA ECC3 controls

Email is securely managed and protected against advanced persistent threats that typically use zero-day malware and viruses.

saudi-nca-ecc::2-4-3-4 · 2-4-3-4 Email protection against APTs and zero-day malware →

In simpler settings suitable PPE, ventilation, good hygiene practices and regular cleaning may be enough. In higher-risk settings such as infectious disease wards, aged care homes where residents are especially vulnerable, and during outbreaks consider increas...

australia-model-code-of-practice-healthcare-and-social-assistance-industry::3.5c · 3.5 Control biological hazards and strengthen controls during outbreaks →

Questions people ask about virus

What is Virus?
A type of malicious software that attaches itself to a legitimate programme or file and spreads when the infected file is executed. Unlike worms, viruses require human action to propagate.
Why is Virus important for compliance?
Virus is a key concept in Information Security. Understanding virus helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Virus?
Virus appears in the requirement text of China Cybersecurity Law (CSL), Dental Board of Australia Infection Prevention and Control Guidance (2024), UNECE WP.29 R155, ISO 27002:2022, Saudi NCA ECC. Across these standards we have identified 16 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Virus?
Explore our compliance framework pages to see how virus applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Virus applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.