Saudi NCA ECC 2-3-3-1: Advanced malware protection on workstations and servers

What does 2-3-3-1 require?

Workstations and servers are protected against viruses, suspicious programs and activity and malware with modern, advanced protection technologies that are securely managed.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in 2-3 Information System and Processing Facilities Protection – Saudi NCA ECC

2-3-1 2-3-1 System and processing facility protection requirements defined
2-3-2 2-3-2 System and processing facility protection implemented
2-3-3-2 2-3-3-2 Strict restriction of external storage media
2-3-3-3 2-3-3-3 Patch management for systems, applications and devices
2-3-3-4 2-3-3-4 Central clock synchronisation to a trusted source
2-3-4 2-3-4 System protection implementation reviewed

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Saudi NCA ECC controls