164.308(a)(5)(ii)(B) Protection from Malicious Software (Addressable)
Administrative safeguard · Addressable
The requirement as we hold it
Protection from Malicious Software (Addressable). Implement procedures for guarding against, detecting, and reporting malicious software. NIST recommends endpoint protection, email filtering, web filtering, and user reporting channels.
The examiner asks
- Show me the procedures that guard against, detect and report malicious software.
- Where would a workforce member report a suspected infection, and is there a record of one?
Evidence to bring
- the malware protection procedure
- the user reporting channel
Source: 164.308(a)(5)(ii)(B) at eCFR. Our statement of the clause, not the instrument verbatim.