CC6.8 - Prevent or Detect Unauthorized or Malicious Software

CC6.8 requires the entity to implement controls that either stop the installation or execution of unauthorized or malicious software, or detect such software promptly so it can be removed or mitigated. The criterion emphasizes proactive protection, monitoring, and response mechanisms to safeguard system integrity and data against malware threats.