IT-3 Workstations – Malware

What is this control about?

Workstations – Malware control – both your software and hardware must be protected from potential threats. Antivirus solutions are typically the most used tools to protect workstations and software, including the OS (operating system).

Available tools in the marketplace

The following listing is “crowdsourced” from our customer base or from external research. TrustCloud does not personally recommend any of the tools below, because we haven’t personally used them.

Available templates

TrustCloud has a curated list of templates internally or externally sourced to help you get started. Click on the link for a downloadable version:

• N/A – no template for this control

Control implementation

Install a centralized antivirus solution to manage all your critical softwares and/or hardware

What evidence do auditors look for?

Most auditors, at a minimum are looking for the below suggested action:

• Provide screenshot of the antivirus policies and list of connected software
• Provide screenshot of the antivirus policies and list of connected devices

Evidence example

From the suggested action above, an example is provided below.

1. Provide a screenshot of the antivirus policies and list of connected software.

Screenshot shows malware’s policies

Google search

2. Provide screenshot of the antivirus policies and list of connected devices

Screenshot shows the list of connected OS softwares