CIPUG Morgan King Virtualization

CIP-007-3 R4Malicious Software Prevention• “The Responsible Entity shall use anti-virus softwareand other malicious software (“malware”) preventiontools, where technically feasible, to detect, prevent,deter, and mitigate the introduction, exposure, andpropagation of malware on all Cyber Assets within theElectronic Security Perimeter(s).”• If not technically feasible submit TFE on Hypervisor• Is a process in place to update Anti-Virus softwareand signatures of all powered-off VMs?35