unified
UC-VULN-05 — Block malware, spam, and phishing across all systems
Deploy centrally managed anti-malware protection on all system components commonly affected by malicious software, with real-time and periodic scanning, automatic signature and engine updates, and tamper protection so users cannot disable or alter it. Quarantine or block detected code, alert responders, and log all detections; periodically re-evaluate components deemed not commonly affected. Filter email and web channels for spam and phishing at entry and exit points, and support the technical controls with user awareness on malware and phishing.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- Vulnerability & Patch Management
- type
- preventive
- category
- technical
Details
- unified_id
- UC-VULN-05
- title
- Block malware, spam, and phishing across all systems
- statement
- Deploy centrally managed anti-malware protection on all system components commonly affected by malicious software, with real-time and periodic scanning, automatic signature and engine updates, and tamper protection so users cannot disable or alter it. Quarantine or block detected code, alert responders, and log all detections; periodically re-evaluate components deemed not commonly affected. Filter email and web channels for spam and phishing at entry and exit points, and support the technical controls with user awareness on malware and phishing.
- domain
- Vulnerability & Patch Management
- control_type
- preventive
- control_category
- technical
- members
- framework
- nist-800-53
- control_id
- SI-3
- coverage
- full
- relationship
- superset_of
- framework
- nist-800-53
- control_id
- SI-8
- coverage
- full
- relationship
- superset_of
- framework
- iso-27001
- control_id
- A.8.7
- coverage
- full
- relationship
- superset_of
- framework
- pci-dss
- control_id
- PCI-Req5
- coverage
- full
- relationship
- superset_of
- guidance
Source
No record-specific source URL is provided.
Connections
- UC-VULN-05 — Block malware, spam, and phishing across all systems maps_to PCI-Req5 — Protect all systems and networks from malicious software
- framework
- pci-dss
- control_id
- PCI-Req5
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- v4.0.1
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- Malware, Email & Web Content Defense Operations operates UC-VULN-05 — Block malware, spam, and phishing across all systems
- Security Control Assessment & POA&M Remediation tests UC-VULN-05 — Block malware, spam, and phishing across all systems
- UC-VULN-05 — Block malware, spam, and phishing across all systems mitigates Zero-day exploitation
- strength
- related
- rationale
- Email/web filtering and behavioral anti-malware block delivery of phishing-borne and novel exploit payloads lacking a signature.
- UC-VULN-05 — Block malware, spam, and phishing across all systems mitigates Exploitation of known, unpatched vulnerabilities
- strength
- related
- rationale
- Anti-malware and web filtering block exploit-kit malware that leverages known unpatched flaws, a compensating layer.
- Cybersecurity Assurance Review tests UC-VULN-05 — Block malware, spam, and phishing across all systems
- UC-VULN-05 — Block malware, spam, and phishing across all systems maps_to A.8.7 — Protection against malware
- framework
- iso-27001
- control_id
- A.8.7
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2022
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-VULN-05 — Block malware, spam, and phishing across all systems maps_to SI-8 — Spam Protection
- framework
- nist-800-53
- control_id
- SI-8
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- ISO 27001 Stage 2 Annex A Controls Audit tests UC-VULN-05 — Block malware, spam, and phishing across all systems
- UC-VULN-05 — Block malware, spam, and phishing across all systems mitigates Malware delivery, insertion and compromise of systems
- strength
- primary
- rationale
- Centrally-managed anti-malware plus email/web filtering blocks and quarantines malware delivered via email, web, media, and downloads.
- UC-VULN-05 — Block malware, spam, and phishing across all systems maps_to SI-3 — Malicious Code Protection
- framework
- nist-800-53
- control_id
- SI-3
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.