Development systems must have antivirus installed and enabled with up-to-date signatures.

From Test and Development Zone D Security Technical Implementation Guide

Part of ENTD0070 - Antivirus not installed on development systems.

Associated with IA controls: ECSC-1, ECVP-1

SV-51295r1_rule Development systems must have antivirus installed and enabled with up-to-date signatures.

Vulnerability discussion

Virus scan programs are a primary line of defense against the introduction of viruses and malicious code that can destroy data and even render a computer inoperable. Utilizing the most current virus scan program provides the ability to detect this malicious code before extensive damage occurs. Updated virus scan data files help protect a system, as new malware is identified by the software vendors on a regular basis.

Check content

Review development images to determine whether antivirus is installed and configured with current signatures. If antivirus is missing on development systems, this is a finding. If there isn't any application development occurring in the zone environment, this requirement is not applicable.

Fix text

Install antivirus with current signatures on development systems.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.