Back to all 93 controls
    Annex A 8.7
    Technological

    A.8.7 Protection against malware

    Protect against malware.

    What good looks like

    Anti-malware on endpoints/servers/email, signature updates, user training.

    Evidence an auditor will ask for

    AV/EDR console, scan logs, training records.

    Put this control into practice

    Check whether your organisation already meets Annex A 8.7 with the free Gap Analysis tool, or get implementation-ready templates for every Annex A control with the Document Pack.