Skip to main content

๐Ÿ’ผ CC6.8 The entity implements controls to prevent or detect and act upon the introduction of unauthorized or malicious software to meet the entity's objectives.

  • Contextual name: ๐Ÿ’ผ CC6.8 The entity implements controls to prevent or detect and act upon the introduction of unauthorized or malicious software to meet the entity's objectives.

  • ID: /frameworks/soc-2/cc6/08

  • Located in: ๐Ÿ’ผ CC6 Logical and Physical Access Controls

Descriptionโ€‹

Empty...

Similarโ€‹

Sub Sectionsโ€‹

SectionSub SectionsInternal RulesPoliciesFlags
๐Ÿ’ผ CC6.8-1 Restricts Installation and Modification of Application and Software
๐Ÿ’ผ CC6.8-2 Detects Unauthorized Changes to Software and Configuration Parameters
๐Ÿ’ผ CC6.8-3 Uses a Defined Change Control Process
๐Ÿ’ผ CC6.8-4 Uses Antivirus and Anti-Malware Software
๐Ÿ’ผ CC6.8-5 Scans Information Assets from Outside the Entity for Malware and Other Unauthorized Software