Development systems must have antivirus installed and enabled with up-to-date signatures.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-39437	ENTD0070	SV-51295r1_rule	ECSC-1 ECVP-1	High

Description
Virus scan programs are a primary line of defense against the introduction of viruses and malicious code that can destroy data and even render a computer inoperable. Utilizing the most current virus scan program provides the ability to detect this malicious code before extensive damage occurs. Updated virus scan data files help protect a system, as new malware is identified by the software vendors on a regular basis.

Description

Virus scan programs are a primary line of defense against the introduction of viruses and malicious code that can destroy data and even render a computer inoperable. Utilizing the most current virus scan program provides the ability to detect this malicious code before extensive damage occurs. Updated virus scan data files help protect a system, as new malware is identified by the software vendors on a regular basis.

STIG	Date
Test and Development Zone A Security Technical Implementation Guide	2015-12-17

Details

Check Text ( C-46712r3_chk )
Review development images to determine whether antivirus is installed and configured with current signatures. If antivirus is missing on development systems, this is a finding. If there isn't any application development occurring in the zone environment, this requirement is not applicable.

Fix Text (F-44450r2_fix)
Install antivirus with current signatures on development systems.