ISM-0579

History

Priority
must
2010
Agencies must:• develop and maintain a set of policies and procedures covering how to:– minimise the likelihood of malicious code being introduced into a system– prevent all unauthorised code from executing on their networks– detect any malicious code installed on a system• make their system users aware of the policies and procedures• ensure that all instances of detected malicious code outbreaks are handled according to the procedures.
2008
Agencies must: a. develop and maintain a set of policies, plans and procedures, derived from a risk assessment, covering how to: 1) minimise the likelihood of malicious code being introduced into a system 2) prevent all unauthorised code from executing on an agency network 3) detect any malicious code installed on a system b. make their system users aware of the agency’s policies, plans and procedures c. ensure that all instances of detected malicious code outbreaks are handled according to the procedures.