ISM-1417

Antivirus software is implemented on workstations and servers with:
• signature-based detection functionality enabled and set to a high level
• heuristic-based detection functionality enabled and set to a high level
• reputation rating functionality enabled
• ransomware protection functionality enabled
• detection signatures configured to update on at least a daily basis
• regular scanning configured for all fixed disks and removable media.

Topic
Antivirus software
Applicable to
all

History

Priority
must
Mar 2022
Antivirus software is implemented on workstations and servers with: • signature-based detection functionality enabled and set to a high level • heuristic-based detection functionality enabled and set to a high level • reputation rating functionality enabled • ransomware protection functionality enabled • detection signatures configured to update on at least a daily basis • regular scanning configured for all fixed disks and removable media.
The recommendation to use reputation rating functionality for antivirus software (ISM-1390) was merged into overarching recommendations for antivirus software (ISM-1417).
2017
Antivirus or internet security software must be used within SOEs.
Control Text Changed. No public explaination.
2015
Agencies must use antivirus or internet security software within SOEs.