Check: GEN006640
Title
The system must use and update a virus scan program. (Cat II impact)
Discussion
Check Content
Ask the SA if they are using a virus scan program and how often the definitions are updated. If there is no virus scan program installed or the definitions are older than seven (7) days, this is a finding.
Fix Text
Install a virus scan tool. Ensure the virus signature definition files are no older than seven (7) days. Ensure the command line virus scan tool is run on a regular basis using a utility, such as cron.
Additional Identifiers
Rule ID:
Vulnerability ID: V-12765
Group Title:
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-001668 |
The organization employs malicious code protection mechanisms at workstations, servers, or mobile computing devices on the network to detect and eradicate malicious code transported by electronic mail, electronic mail attachments, web accesses, removable media, or other common means or inserted through the exploitation of information system vulnerabilities. |
Controls
Number | Title |
---|---|
No controls are assigned to this check |