SI.L2-3.14.4  

Reference: CMMC 2.11

Family: SI

Level Introduced: 2

Title: Update Malicious Code Protection [CUI Data]

Practice:
Update malicious code protection mechanisms when new releases are available.

CMMC Clarification:
You can protect your company's valuable IT systems by staying up to date on new security releases that stop malicious code and monitoring the system regularly. Malicious code is program code that is always changing, so it is important to always have up-to-date protections, such as anti-malware tools.

Example
You bought a new computer for your small business. You know that you need to protect your company's information from viruses, spyware, etc. So, you also purchased and installed anti- malware software. You configure the software to automatically update to the latest antivirus code and definitions of all known malware.

Source: CMMC v2.0