Where an applicable patch was not installed, the Responsible Entity did not document the compensating measure(s) applied to mitigate risk. Malicious Software Prevention R4. N/A N/A N/A The Responsible The Responsible Entity shall — Entity, where use anti-virus software and other technically feasible, did malicious software (“malware”) not use anti-virus prevention tools, where software or other technically feasible, to detect, malicious software prevent, deter, and mitigate the prevention (“malware”) introduction, exposure, and tools, on one or more propagation of malware on all Cyber Assets within Cyber Assets within the the Electronic Security Electronic Security Perimeter(s). Perimeter(s). The Responsible Entity shall R4.1. N/A N/A N/A The Responsible Entity document and implement did not document the and malware prevention implementation of tools. In the case where anti-virus antivirus and malware software and malware prevention prevention tools for tools are not installed, the cyber assets within the Responsible Entity shall electronic security document compensating perimeter. measure(s) applied to mitigate risk exposure. OR The Responsible Entity did not document the implementation of compensating measure(s) applied to mitigate risk exposure where antivirus and
Where an applicable patch was not installed, the Responsible Entity did not document the compensating measure(s) applied to mitigate risk. R4. Malicious Software Prevention — The Responsible Entity shall use anti-virus software and other malicious software (“malware”) prevention tools, where technically feasible, to detect, prevent, deter, and mitigate the introduction, exposure, and propagation of malware on all Cyber Assets within the Electronic Security Perimeter(s). N/A N/A N/A The Responsible Entity, where technically feasible, did not use anti-virus software or other malicious software (“malware”) prevention tools, on one or more Cyber Assets within the Electronic Security Perimeter(s). R4.1. The Responsible Entity shall document and implement and malware prevention tools. In the case where anti-virus software and malware prevention tools are not installed, the Responsible Entity shall document compensating measure(s) applied to mitigate risk exposure. N/A N/A N/A The Responsible Entity did not document the implementation of antivirus and malware prevention tools for cyber assets within the electronic security perimeter. OR The Responsible Entity did not document the implementation of compensating measure(s) applied to mitigate risk exposure where antivirus and
VSL_Matrix_Complete_2016_01_01.docx