Purpose

To establish requirements which must be met by all computers connected to (^Company^) lab networks to ensure effective virus detection and prevention. 

Scope

This policy applies to all (^Company^) lab computers that are PC-based or utilize PC-file directory sharing. This includes, but is not limited to, desktop computers, laptop computers, file/ftp/tftp/proxy servers, and any PC based lab equipment such as traffic generators.

Policy

All (^Company^) PC-based lab computers must have (^Company^)'s standard, supported anti-virus software installed and scheduled to run at regular intervals. In addition, the anti-virus software and the virus pattern files must be kept up-to-date. Virus-infected computers must be removed from the network until they are verified as virus-free. Lab Admins/Lab Managers are responsible for creating procedures that ensure anti-virus software is run at regular intervals, and computers are verified as virus-free. Any activities with the intention to create and/or distribute malicious programs into (^Company^)'s networks (e.g., viruses, worms, Trojan horses, e-mail bombs, etc.) are prohibited, in accordance with the Acceptable Use Policy. 

Refer to (^Company^)'s Anti-Virus Recommended Processes to help prevent virus problems.

Noted exceptions: Machines with operating systems other than those based on Microsoft products are excepted at the current time.

Policy Compliance

Compliance Measurement

The Infosec team will verify compliance to this policy through various methods, including but not limited to, periodic walk-thrus, video monitoring, business tool reports, internal and external audits, and feedback to the policy owner. 

Exceptions

Any exception to the policy must be approved by the Infosec team in advance. 

Non-Compliance

An employee found to have violated this policy may be subject to disciplinary action, up to and including termination of employment. 

Related Standards, Policies and Processes

• Acceptable Use Policy
• Anti-Virus Recommended Processes