14.6.1All computer systems including servers, work stations, personal computers (PCs), laptops and other handheld devices must have appropriate anti-virus solutions to prevent information loss due to viruses, Trojans, worms and bots;
14.6.2Anti-virus solutions on all computer systems must be updated automatically;
14.6.3Daily automated antivirus scanning must be activated for every computer system and at the network level;
14.6.4Anti-virus configuration settings must be comprehensive and robust to prevent vulnerabilities from all external interferences, malicious attacks and intrusions;
14.6.5Antivirus scanning must be undertaken automatically at regular intervals;
14.6.6All incoming and outgoing emails with files attached must be auto screened before the mail reaches the end user mail box. In case of doubt, the system must block such emails and automatically notify the IT team to carry out further investigation; and
14.6.7Users must not be given privileges to alter the settings of the antivirus solutions.