|
Policies and procedures with specifications for protection against malware are documented, communicated, and provided in accordance with SP-01 with respect to the following aspects: 1. Use of system-specific protection mechanisms; 2. Operating protection programmes on system components under the responsibility of the cloud service provider; 3. Operation of protection programmes for personnel's terminal equipment; and 4. Operation of protection programmes on flows coming in over cloud service provider end-devices, as well as all other incoming flows. Supplementary information Protection programmes for personnel devices can be, for example, server-based protection programmes that scan files in attachments on the server or filter network traffic.
|