ISM-1417

Antivirus software is implemented on workstations and servers with:
• signature-based detection functionality enabled and set to a high level
• heuristic-based detection functionality enabled and set to a high level
• reputation rating functionality enabled
• ransomware protection functionality enabled
• detection signatures configured to update on at least a daily basis
• regular scanning configured for all fixed disks and removable media.

Topic
Antivirus software
Applicable to
Non Classified, Official, Protected, Secret, Top Secret

History

Priority
must
Mar 2022
Antivirus software is implemented on workstations and servers with: • signature-based detection functionality enabled and set to a high level • heuristic-based detection functionality enabled and set to a high level • reputation rating functionality enabled • ransomware protection functionality enabled • detection signatures configured to update on at least a daily basis • regular scanning configured for all fixed disks and removable media.
The recommendation to use reputation rating functionality for antivirus software (ISM-1390) was merged into overarching recommendations for antivirus software (ISM-1417).
2017
Antivirus or internet security software must be used within SOEs.
Control Text Changed. No public explaination.
2015
Agencies must use antivirus or internet security software within SOEs.