Guest user Created: Jul 18, 2022 Last commented: Jul 18, 2022

Is antivirus software requirement for companies seeking ISO 27001 certification?

In working with my current company through their ISO27001 audit, I wanted to ask if antivirus software was a requirement for companies seeking ISO27001 certified? We are currently operating almost entirely out of the cloud on mac devices, so we wanted to ask if we had to get one before the audit.

0 0

Assign topic to the user

Select user

Expert

Rhand Leal Jul 18, 2022

Antivirus, like other antimalware solutions, is a requirement only if you have relevant risks or legal requirements (i.e., laws, regulations, or contracts) that demand its implementation. In case you have no risks or legal requirements demanding the implementation of antivirus, you do not need to implement it to be compliant with ISO 27001.

This article will provide you with further explanation about the selection of controls:

Risk treatment https://advisera.com/27001academy/iso-27001-risk-assessment-treatment-management/#treatment

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Jul 18, 2022

Expert Advice Community