💼 SI-3 Malicious Code Protection (L)(M)(H)
- Contextual name: 💼 SI-3 Malicious Code Protection (L)(M)(H)
- ID:
/frameworks/fedramp-moderate-security-controls/si/03 - Located in: 💼 System and Information Integrity
Description
a. Implement [FedRAMP Assignment: signature based and non-signature based] malicious code protection mechanisms at system entry and exit points to detect and eradicate malicious code;
b. Automatically update malicious code protection mechanisms as new releases are available in accordance with organizational configuration management policy and procedures;
c. Configure malicious code protection mechanisms to:
-
Perform periodic scans of the system [FedRAMP Assignment: at least weekly] and real-time scans of files from external sources at [FedRAMP Assignment: to include endpoints and network entry and exit points] as the files are downloaded, opened, or executed in accordance with organizational policy; and
-
[FedRAMP Assignment: to include blocking and quarantining malicious code] and send alert to [FedRAMP Assignment; administrator or defined security personnel near-realtime] in response to malicious code detection; and
d. Address the receipt of false positives during malicious code detection and eradication and the resulting potential impact on the availability of the system.
Similar
- Sections
/frameworks/fedramp-high-security-controls/si/03
- Internal
- ID:
dec-c-5793a535
- ID:
Similar Sections (Take Policies From)
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 FedRAMP High Security Controls → 💼 SI-3 Malicious Code Protection (L)(M)(H) | 7 | 7 |
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|