Operations, logging and vulnerability ยท question family
Malware protection and endpoints: the clause the question tests
Whether every endpoint and server runs managed protection against malicious code.
How the customer usually asks it
example"Is anti-malware software installed on all laptops and servers?"
Anchor clauses
1 framework| Framework | Anchor clause |
|---|---|
| ISO/IEC 27001:2022 | 8.7 Protection against malware |
Every framework that anchors this family is listed here; a register shows the ones ticked for the customer.
Evidence expected
The endpoint protection standard, coverage figures across laptops and servers, and the device management baseline.
The clauses, with what an assessor asks for
ISO 27001 8.7 Protection against malwareImplement malware protection backed by user awareness.
Evidence an assessor expects: Anti malware policy; Endpoint protection; User awareness program; Malware incident handling
Where answers usually fall short: Outdated malware signatures not regularly updated; Training limited to annual sessions
Source: ISO/IEC 27001:2022
Where answers usually fall short: Outdated malware signatures not regularly updated; Training limited to annual sessions
Source: ISO/IEC 27001:2022