8.1

5.3.2.1 The organization shall enable anti-malware solutions that update automatically and prevent malware from executing without user intervention.

 

5.7.3.3 The organization shall activate any software firewalls included on devices within their networks or document the alternative measures in place instead of these firewalls.

 

5.4.2.1 The organization shall implement secure configurations for all their devices by:

a. changing all default passwords;

b. by turning off unnecessary features i.e., block unused ports, disable unused services, remove unused or obsolete software; and

c. by enabling all relevant security features.