ISO 27043 22: Protection from malware

What else in your programme already covers this

This control maps to 42 controls across 32 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ASD Strategies to Mitigate Cyber Security Incidents · 3 controls

ASD37-06 Email content filtering (Excellent)
ASD37-12 Antivirus software with heuristics (Very Good)
ASD37-16 Antivirus software with signatures (Limited)

API 1164 · 1 control

API1164-12 Incident Response

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) · 1 control

AWWA-4.1 Malware Protection

FBI CJIS Security Policy · 1 control

CJIS-10 System and Information Integrity

IEC 62443 · 1 control

IEC62443-12 Malware prevention for operational systems

ISO 27017:2015 · 1 control

12.2 Protection from malware

ISO 27018:2019 · 1 control

12.2 Protection from malware

ISO 27019 · 1 control

ISO27019-12 Malware prevention for operational systems

ISO 27701:2019 · 1 control

6.9.2 Protection from malware

ISO/IEC 27010:2015 · 1 control

27010-12.2 Protection from malware

ISO/IEC 27011:2024 · 1 control

27011-8.5 Vulnerability and malware management

ISO/SAE 21434 · 1 control

ISO21434-22 Protection from malware

MITRE ATT&CK · 1 control

MITRE-ATTACK-Detection-Data-Sources-Analytics-Sigma-Splunk-KQL-Yara-Snort-SIEM-Hunt-Engineering MITRE ATT&CK Detection + Data Sources + Analytics + Sigma + Splunk + KQL + Yara + Snort + SIEM + Hunt

NERC CIP · 1 control

NERCCIP-5 System Security Management + Configuration Change Management and Vulnerability Assessments (CIP-007 + CIP-010)

NIST SP 1800-32 · 1 control

NIST1800-32-12 Malware prevention for operational systems

NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment) · 1 control

NISTSP115-8 Operational Considerations - Tools, Reporting Templates, ISMS Integration, Annex Material

NIST SP 800-123 · 1 control

NISTSP123-5 Server Operations - Patching, Malware, Logging, Backup

NIST SP 800-124 Revision 2 - Guidelines for Managing the Security of Mobile Devices · 1 control

MD124-TECH-03 Mobile Application Vetting

NIST SP 800-137 · 1 control

NISTSP137-6 Malware, Identity Access, and Network Boundary Monitoring

NIST SP 800-61 · 1 control

NISTSP61-5 Containment, Eradication, and Recovery

NIST SP 800-63-4 · 1 control

NISTSP63R4-8 Operational Audit, Session Management, Recovery, and Cross-cutting Controls

NIST SP 800-82 Revision 3: Guide to Industrial Control Systems (ICS) Security · 1 control

NISTSP82-5 OT Configuration Management, Patching, Vulnerability Management, and Malware Protection

NIST SP 800-88 · 1 control

NISTSP88-7 Verification, Audit, Training, and Environmental/Safety Controls

NIST SP 800-92 · 1 control

NISTSP92-5 Log Analysis: Correlation, Baselining, Anomaly Detection, Alerting, Manual Review

OWASP MASVS · 1 control

OWASPMASVS-6 MASVS-CODE: Code Quality, Build Settings, and Updates

OWASP SAMM · 1 control

OWASPSAMM-5 Operations: Incident Management, Environment Management, Operational Management

OpenSSF Scorecard · 1 control

OSSFSC-4 Security Policy, Vulnerability Disclosure, Responsible Reporting

PTES · 1 control

PTESPHASE-3 Threat Modeling

SANS Incident Handler's Handbook and PICERL Methodology · 1 control

PICERL-E1 Threat Removal

SIG (Shared Assessments) · 1 control

SHAREASSESS-4 Vulnerability Management, Patching, Application Security

SLSA · 1 control

SUPCHAIN-2 Source Integrity - Branch Protection, Code Review, Two-Person Rule

TISAX - Trusted Information Security Assessment Exchange · 1 control

TISAX-TECH-03 Operations and Communications Security

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.