+SYS.2.1.A6 Using Malware Protection Programs (B)

SYS.2.1.A6 Using Malware Protection Programs (B)

Depending on the operating system installed and other protection mechanisms of a given client, it MUST be checked whether malware protection programs should be used. Where available, concrete statements from the operating system modules of the IT-Grundschutz Compendium on whether such virus protection is necessary MUST be considered.

Protection programs on clients MUST be configured so that users cannot disable such programs or make any security-relevant changes to their settings.

Protection programs MUST search for malware when files are exchanged or transmitted. All the data on clients MUST be checked regularly for malware. If a client is infected, it MUST be examined in offline mode to determine whether the detected malware has already collected confidential data, disabled any protective functions, or downloaded any code from the Internet, for example.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.26 Malfunction of Devices or Systems
blocks G 0.39 Malware
blocks G 0.40 Denial of Service