Cyber Essentials question · Malware protection
Is anti-malware protection active on all in-scope devices (or do you only allow approved applications to run)?
Why assessors ask this
Either approach is accepted: anti-malware that's kept updated, OR application allow-listing.
What “good” looks like for Malware protection
- Make sure reputable, auto-updating anti-malware is running on every device — or use application allow-listing instead.
- Prevent unapproved software from running, and don't auto-open downloads or attachments.
See where you stand in 5 minutes
Answer the Cyber Essentials questions in plain English and get a per-control readiness verdict — free, no login needed, and we don't store your answers.
Start the free readiness check →Part of the Malware protection control.
This is a free readiness / gap report to help you prepare — it is not a certification, and we are not an IASME Certification Body. To certify, you apply through an accredited Certification Body.