END-04: Malicious Code Protection (Anti-Malware)

END-04 · Malicious Code Protection (Anti-Malware)

Control Description

Mechanisms exist to utilize antimalware technologies to detect and eradicate malicious code.

Control Question

Assessment question for control validation

Does the organization utilize antimalware technologies to detect and eradicate malicious code?

Control Weighting

Validation Cadence

Annual

NIST CSF Function

Detect

Supply Chain Risk Management (SCRM) Tiers

Applicable SCRM tier levels for this control

Tier 2 - Operational

Tier 3 - Tactical

Core Control Designations

Special designations and baseline inclusions

MAD: END-04

ESP Level 1: END-04

ESP Level 2: END-04

ESP Level 3: END-04

Errata & Additional Notes

- updated mapping CMMC Level 1 - updated mapping CMMC Level 2 - updated mapping FAR 52.204-21