Compliancemanzill.com
NIST 800-53 rev.5

NIST 800-53 rev.5/System and Information Integrity/893 of 1011

SI-03 (06)Malicious Code Protection | Testing and Verification

Control family: System and Information Integrity

Control description

(a) Test malicious code protection mechanisms [Assignment: organization-defined frequency] by introducing known benign code into the system; and

(b) Verify that the detection of the code and the associated incident reporting occur.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.