Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue SI-03: SI-03 Malicious code protection

The organisation implements signature-based and, or, non-signature-based malicious code protection at entry and exit points, updates it automatically under configuration management, configures periodic scans at a set frequency and real-time scans of external files at endpoints and network points as they are downloaded, opened or executed, blocks or quarantines malicious code or takes defined action and alerts defined roles, and addresses false positives and their effect on availability. 10 enhancements.