Implement signature-based malicious code protection at system entry and exit points, update it automatically as new releases arrive under configuration management, configure it for periodic scans at least daily and real-time scans of files from external sources at network boundaries and on all servers and endpoints as files are downloaded, opened or executed, block or quarantine malicious code, take mitigating action and invoke incident response where needed with alerts to administrators or information security personnel, and address false positives and their effect on availability.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.