Draft Anti- Virus Policy
The installation and use of anti-virus software is a critical tool in the Malawi Polytechnic defences against breaches of information confidentiality, integrity and availability.
Whilst threats to information security have grown increasingly complex and difficult to detect, anti-virus software still provides a level of assurance against the most common and prevalent malware threats. Failure to install anti-virus software increases the risks not just to the data and user information held on a machine, but also to those hosted on all other machines across the campus network.
The purpose of this policy is to stipulate that anti-virus software must be installed by default on all Polytechnic-owned systems. These are all Polytechnic-built and managed systems (including servers, desktops, laptops and mobile devices) as well as all third party built and hosted systems used by the Malawi Polytechnic.
- Any exceptions should be documented and justified by the system owner.
- Any machine connecting to the Malawi Polytechnic network may be denied access if it is not running antivirus software.
- The ICT Centre team must be responsible for installation of anti-virus software on servers and the standard desktop build.
- The ICT Centre team must be responsible for the support and update of The Malawi Polytechnic workstations and laptops.
- The ICT Centre team must be responsible for approving or rejecting any suggested exceptions
- The anti-virus software supplied and managed by The Malawi Polytechnic must be installed, run and kept up to date as a default position on all systems owned and built by The Malawi Polytechnic. Currently, Sophos is the recommended anti- virus.
- All systems built and / or hosted by third parties that are used by The Malawi Polytechnic must run anti-virus software.
In order to maintain the security of The Malawi Polytechnic network and protect the confidentiality, integrity and availability of data within it, the centre may monitor any system attached to the network for anti-virus software and may deny any systems without up-to-date anti-virus network access until such time that up-to-date anti-virus software is installed.
- Any exceptions to the policy must be documented and justified by the system owner, recorded by the ICT Help Desk and approved by The ICT Centre team.
- Apple devices cannot currently run anti-virus software.