TalentedCJ

Malware Defense Plan

This policy is established to:

• Create prudent and acceptable practices regarding anti-virus management
• Define key terms regarding malware and anti-virus protection
• Educate individuals, who utilize TalentedCJ’s system resources, on the responsibilities associated with anti-virus protection

Note: The terms virus and malware, as well as anti-virus and anti-malware, may be used interchangeably.

Policy Detail

All computer devices connected to the TalentedCJ’s network and networked resources shall have anti-virus software installed and configured so that the virus definition files are current and are routinely and automatically updated. The anti-virus software must be actively running on these devices.

The virus protection software must not be disabled or bypassed without IT approval.

The settings for the virus protection software must not be altered in a manner that will reduce the effectiveness of the software.

The automatic update frequency of the virus protection software must not be altered to reduce the frequency of updates.

Each file server, attached to TalentedCJ’s network, must utilize TalentedCJ’s IT-approved virus protection software and setup to detect and clean viruses that may infect TalentedCJ’s resources.

Policy

Configuration

1. IT must install anti-malware software on all enterprise assets where appropriate. 
2. Users must not disable anti-malware software on their enterprise assets
3. Users must not modify the update frequency specified as part of the Secure Configuration Management Policy. 

Update

1. Anti-malware software must be configured to automatically update.
2. IT must ensure that anti-malware signatures are kept up-to-date as they become available via an automatic update process.

Detection

1. IT must ensure that anti-malware software is properly functioning on all enterprise assets and configured to warn users that a threat has been detected.
2. IT must use logs generated to research the actual sequence of events that made the anti-malware suit report an infection alert.

Reporting

1. All confirmed high severity alerts must be reported to the business owner. 

Remediation

1. Identified malware must be removed from enterprise assets. 
2. Unauthorized software must be removed from use on enterprise assets or receive a documented exception.

Because new viruses are discovered every day, users should periodically check the Anti-Virus Policy for updates. The TalentedCJ’s IT Department should be contacted for updated recommendations.