+Protection Against Malware - Concept

Protection Against Malware - Concept

Policies and instructions with specifications for protection against malware are documented, communicated, and provided in accordance with SP-01 with respect to the following aspects:
• Use of system-specific protection mechanisms;
• Operating protection programs on system components under the responsibility of the Cloud Service Provider that are used to provide the cloud service in the production environment; and
• Operation of protection programs for employees' terminal equipment.
Additonal CriteriaThe Cloud Service Provider creates regular reports on the checks performed, which are reviewed and analysed by authorised bodies or committees. Policies and instructions describe the technical measures taken to securely configure and monitor the management console (both the customer's self-service and the service provider's cloud administration) to protect it from malware. Updates are applied at the highest frequency that the vendor(s) contractually offer(s).
Supplementary Information - About the CriteriaProtection programs for employee devices can be, for example, server-based protection programs that scan files in attachments on the server or filter network traffic.

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer