451 Research report on Cyber Risk Assurance fueled by continuous control monitoring. Read the report →

IT-3 Workstations – Malware

Estimated reading: 2 minutes 2949 views

What is IT-3 workstation malware control?

One of the many controls, IT-3 workstation malware control, is a comprehensive system designed to protect computer workstations from various forms of malware. This software solution provides real-time monitoring and detection of malicious programs, such as viruses, worms, trojans, and spyware. It works by scanning files and applications on the workstation, identifying any potentially harmful elements, and taking appropriate actions to neutralize them.

IT-3 workstation malware control also includes features such as firewall protection, web browsing protection, and email filtering to further safeguard the workstation from potential threats. By implementing this solution, organizations can ensure the security and integrity of their computer systems, minimizing the risk of data breaches and unauthorized access.

IT-3 control talks about how both your software and hardware must be protected from potential threats. Antivirus solutions are typically the most commonly used tools to protect workstations and software, including the operating system.

Available tools in the marketplace

The following listing is “crowdsourced” from our customer base or from external research. TrustCloud does not personally recommend any of the tools below, as we haven’t used them.

Asset Monitoring / Endpoint Security Tools
Jamf (Mac-specific)
Mosyle (Mac-specific)
Kolide
Rippling
Duo
OSQuery (free, open source)

Available templates

TrustCloud has a curated list of templates, internally or externally sourced, to help you get started. Click on the link for a downloadable version:

  1. N/A: no template for this control

Control implementation

To IT-3 malware control,

Install a centralized antivirus solution to manage all your critical software and/or hardware.

What evidence do auditors look for?

Most auditors, at a minimum, are looking for the below-suggested action:

  1. Provide screenshots of the antivirus policies and a list of connected software.
  2. Provide screenshots of the antivirus policies and a list of connected devices.

Evidence example

For the suggested action, an example is provided below:

  1. Provide a screenshot of the antivirus policies and a list of connected software.
    The following screenshot shows the malware’s policies.
    Google searchIT-3
  2. Provide screenshots of the antivirus policies and a list of connected devices.
    The following screenshot shows the list of connected OS software.
    IT 3 Workstations Malware 02

Have a question?

Join our TrustCommunity to learn about security, privacy, governance, risk and compliance, collaborate with your peers, and share and review the trust posture of companies that value trust and transparency!

Join the conversation

You might also be interested in

Systems

A system is a piece of software, either built by the organization or purchased...

Application Launchpad

A system is a piece of software, either built by the organization or purchased...

Custom Frameworks

TrustCloud supports several standards and frameworks out of the box, including SOC 2, CMMC,...

Hybrid Data Fabric

Rather than chasing fragmented spreadsheets or outdated lists, hybrid data fabric gives you a...

Groups in Controls

TrustCloud provides you with a comprehensive set of controls to get certified against several...

Mapping a Control

TrustCloud’s common controls framework maps a comprehensive set of certified standards controls and your...

Sharing Controls with customers

The TrustShare application in TrustCloud makes it easy for startups, SMBs, and enterprises to...

Excluding a control, test or attestation

The exclusion allows you to remove certain resources, controls or tests from your program...
OR

TrustCommunity

Instant support with our AI chatbot

Please login with your TrustCloud credentials to continue