Protection against malicious and mobile code

Objective: To protect the integrity of software and information.

Precautions are required to prevent and detect the introduction of malicious software.

Controls against malicious software

Detection and prevention controls to protect against malicious software, appropriate procedures and user awareness training should be implemented.

Controls against mobile code

Where mobile code has been authorised, it must be ensured that it complies with the organisational security policy. Unauthorised mobile code should be prevented from being executed.