← SOC 2 · CC6 — Logical and Physical Access
CC6.8 — Prevention and detection of unauthorised software
high
malwareendpoint
Requirement
The entity implements controls to prevent or detect and act upon the introduction of unauthorised or malicious software.
What the engine looks for
Every group below must be satisfied — by an affirmative statement, not a plan, a hedge or a denial — for the control to count as covered. A term ending in … matches any word it begins. Supporting terms do not change the verdict — they raise confidence and distinguish a policy that names a mechanism from one that gestures at a category.
Required element 1 — any one of
malwareantivirusanti-virusedrendpoint protectionunauthorised softwareunauthorized software
Supporting terms — specificity signals
allowlistwhitelistmdmsignaturequarantinecode signing
Equivalent controls elsewhere
Matched on shared topics. Satisfying this control usually moves these too.
| Framework | Control | Title | Shared topics |
|---|---|---|---|
| ISO 27001 | A.8.7 | Protection against malware | malware endpoint |
| PCI DSS 4.0.1 | 5.2-5.3 | Anti-malware deployed and kept current | malware endpoint |
| ISO 27001 | A.6.7 | Remote working | endpoint |
| ISO 27001 | A.7.9 | Security of assets off-premises | endpoint |
| ISO 27001 | A.8.1 | User end point devices | endpoint |
| PCI DSS 4.0.1 | 5.4.1 | Protection against phishing | malware |
| HIPAA | 164.310(b)-(c) | Workstation use and security (R) | endpoint |
| NIST CSF 2.0 | DE.CM-09 | Computing hardware, software and services are monitored | endpoint |