grc-scan

Cyber Essentials question · Malware protection

Are unapproved applications prevented from running, and downloads/attachments handled safely?

Why assessors ask this

E.g. blocking unsigned/unknown apps, and not auto-running content from email or the web.

What “good” looks like for Malware protection

  • Make sure reputable, auto-updating anti-malware is running on every device — or use application allow-listing instead.
  • Prevent unapproved software from running, and don't auto-open downloads or attachments.

See where you stand in 5 minutes

Answer the Cyber Essentials questions in plain English and get a per-control readiness verdict — free, no login needed, and we don't store your answers.

Start the free readiness check

Part of the Malware protection control.

This is a free readiness / gap report to help you prepare — it is not a certification, and we are not an IASME Certification Body. To certify, you apply through an accredited Certification Body.