3.14.2 Protect Against Malicious Code

3.14.2 Provide protection from malicious code at appropriate locations within organizational systems.

To go back to the NIST 800-171 Controls page, click here.

Guides

• NIST SP 800-83 Guide to Malware Incident Prevention & Handling for Desktops & Laptops
• SANS Institute – Enterprise Survival Guide for Ransomware Attacks
• SANS Institute – A Practical Guide to Enterprise Antivirus & Malware Prevention

Example Tools

• Sophos
• McAfee
• Broadcom
• Malwarebytes
• ClamAV

Sample Policy & Procedures

• Norfolk State University – Administrative Policy # 32-8-1703 (2014) Malicious Code Protection
• University of Mary Washington – Malicious Code Protection Standard
• Metropolitan Government of Nashville & Davidson County – Information Security Policy ISM 11 – Protection Against Malicious Code

Additional Lessons Learned

• Salisbury University – Malware/Spyware Prevention Guide

Videos

• YouTube – Malicious Code (Malware) – Information Security Lesson #4 of 12
• BrightTALK – Seven Ways Malicious Code Enters Your Virtual World (and what to do about it)

Vendor Documentation

• Veracode – Malicious Code
• Kaspersky – How machine learning works, simplified
• Microsoft Technet – Antivirus evolved