SI-3(2)—Malicious Code Protection

PBMM (P2)

Secret (P2)

Operational

>Control Description

MALICIOUS CODE PROTECTION | AUTOMATIC UPDATES The information system automatically updates malicious code protection mechanisms.

>Supplemental Guidance

Malicious code protection mechanisms include, for example, signature definitions. Due to information system integrity and availability concerns, organizations give careful consideration to the methodology used to carry out automatic updates. Related control: SI-8.

>Tailoring Guidance

Control enhancements (1) and (2) ensure that malicious code mechanisms are centrally managed and that they are automatically updated so as to be effective.

Ask AI

Configure your API key to use AI features.