SI-3 Malicious Code Protection

Control statement

a. Implement {{ insert: param, si-03_odp.01 }} malicious code protection mechanisms at system entry and exit points to detect and eradicate malicious code;
    b. Automatically update malicious code protection mechanisms as new releases are available in accordance with organizational configuration management policy and procedures;
    c. Configure malicious code protection mechanisms to:
        1. Perform periodic scans of the system {{ insert: param, si-03_odp.02 }} and real-time scans of files from external sources at {{ insert: param, si-03_odp.03 }} as the files are downloaded, opened, or executed in accordance with organizational policy; and
        2.  {{ insert: param, si-03_odp.04 }} ; and send alert to {{ insert: param, si-03_odp.06 }} in response to malicious code detection; and
    d. Address the receipt of false positives during malicious code detection and eradication and the resulting potential impact on the availability of the system.

Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is preserved in the catalog database.

Covered by these Key Security Indicators