Habit 12 of 18
Devices and systems
Malware protection on every device
Every device has malware protection that is switched on and up to date.
Malware protection catches many attacks that get past people, and raises an alarm when something is wrong.
Switch it on in the map Counts towards 5 articles, controls and categories
§1 How to do it
How a small firm does it
- Make sure every computer has malware protection switched on. The built-in tools are often enough.
- Check that it updates itself and that alerts go to someone.
- Stop staff installing software freely on work devices.
Evidence that shows it
- A report showing protection is on and up to date on every device
- Who receives the alerts
Ireland: NCSC Ireland guidance on malware protection applies here. Irish NIS2 law is still pending.
§2 What it counts towards
What it counts towards
Most links are “supports”: doing this helps you show you meet the reference, without matching it exactly. None of them means “compliant”.
EU NIS2 Directive 1 item
-
21(2)(e) Security when buying, building and maintaining systems · supports
security in network and information systems acquisition, development and maintenance, including vulnerability handling and disclosure
The Commission’s implementing rules for this measure include protection against malicious software (2024/2690, Annex §6.9).
Read Art 21(2)(e) on EUR-Lex
ISO/IEC 27001:2022 2 items
-
A.8.1 Laptops and phones used for work · supports
ISO text is copyrighted. Control number and our own description only. Not yet read against the standard.
Protecting laptops and phones used for work is the subject of this control.
About ISO/IEC 27001:2022 on ISO -
A.8.7 Protection against malware · supports
ISO text is copyrighted. Control number and our own description only. Not yet read against the standard.
The control is about protection against malware.
About ISO/IEC 27001:2022 on ISO
NIST Cybersecurity Framework 2.0 2 items
-
PR.PS Platform security · supports
PR.PS-05: Installation and execution of unauthorized software are prevented
Malware protection stops unauthorised software from installing and running.
Read PR.PS-05 on NIST -
DE.CM Continuous monitoring · supports
DE.CM-09: Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events
Malware protection watches devices and their data for signs of attack.
Read DE.CM-09 on NIST
Indicative mapping, written by hand from public sources. Not legal advice and not a compliance test. Check anything important against the official texts.