Crossfoot
Crossfoot / Controls / Malware protection
Draft v0.1.06 of 6 frameworks

Malware protection

Anti-malware or equivalent controls on systems at risk, kept current and actively running; phishing defenses.

Where it appears

SOC 2
CC6.8Implements controls to prevent or detect and act upon the introduction of unauthorized or malicious software
PCI DSS 4.0
5.2Malicious software is prevented, or detected and addressed
5.3Anti-malware mechanisms and processes are active, maintained and monitored
5.4Anti-phishing mechanisms protect users against phishing attacks
NIST CSF 2.0
PR.PS-05Installation and execution of unauthorized software are prevented
DE.CMContinuous monitoring
ISO 27001:2022
A.8.7Protection against malware
HIPAA Security Rule
164.308(a)(5)(ii)(B)Protection from malicious software
NIST 800-53 r5
SI-3Malicious code protection

Evidence auditors usually ask for

A typical starting list. Your assessor's request list is the one that counts.

  • Endpoint protection deployment report showing coverage and current signatures/agent versions
  • Configuration showing real-time or periodic scanning and tamper protection
  • Anti-phishing controls (email filtering configuration) and phishing training/test results

Crosswalks that include this

SOC 2 to PCI DSS 4.0SOC 2 to NIST CSF 2.0SOC 2 to ISO 27001:2022SOC 2 to HIPAA Security RuleSOC 2 to NIST 800-53 r5PCI DSS 4.0 to SOC 2PCI DSS 4.0 to NIST CSF 2.0PCI DSS 4.0 to ISO 27001:2022PCI DSS 4.0 to HIPAA Security RulePCI DSS 4.0 to NIST 800-53 r5NIST CSF 2.0 to SOC 2NIST CSF 2.0 to PCI DSS 4.0