CYBER ESSENTIALS
Cyber Essentials Malware Protection
Protect every device. Prevent malicious software from taking hold.
Malware remains one of the most common causes of cybersecurity incidents. From ransomware and spyware to malicious downloads and infected attachments, attackers use malicious software to steal information, compromise systems and disrupt business operations.
Cyber Essentials requires organisations to protect in-scope devices against malware using appropriate technical controls. However, simply having antivirus software installed doesn't necessarily mean a device is adequately protected.
Security software may be disabled, protection settings weakened, signatures outdated or exclusions introduced that leave systems exposed. Mobile devices and other platforms may use different protection mechanisms altogether.
The challenge is understanding which protections are in place, whether they meet Cyber Essentials requirements and whether they remain effective as devices and configurations change.
SecureX7 helps organisations assess supported endpoint security configurations, identify weaknesses in malware protection and provide AI-powered actionable remediation guidance.
Rather than relying solely on whether a security product is installed, SecureX7 helps establish whether relevant protective controls are configured appropriately.
Know what's protected. Identify what's exposed. Remediate with confidence.
Protection Approaches
Cyber Essentials recognises different ways to protect against malware
Cyber Essentials allows organisations to use appropriate malware protection approaches depending on the devices and operating systems within their assessment scope.
Anti-malware software
Install and maintain appropriate anti-malware protection, such as Microsoft Defender Antivirus or another supported endpoint security product. Protection should be active, kept updated, capable of detecting and preventing malicious software, and configured to protect users from common threats.
Application allow listing
Restrict which applications and executable code can run, permitting only software that has been explicitly approved. This reduces the opportunity for unauthorised or malicious programs to execute.
Application sandboxing
Use supported platforms that isolate applications from other applications and sensitive system resources, limiting the damage malicious software can cause. This approach is particularly relevant to certain mobile operating systems.
The appropriate approach depends on the platform and the Cyber Essentials requirements applicable to that device.
Whichever method is used, the objective is consistent: prevent malicious software from executing or causing harm.
SecureX7 helps assess supported endpoint configurations and identify security weaknesses that could undermine malware protection, while AI-powered guidance explains the corrective actions required.
What to Check Before Assessment
Don't assume protection is working simply because it's installed
Cyber Essentials assessment requires organisations to confirm that appropriate malware protection is implemented across relevant devices.
Before completing your assessment, review the following areas:
1. Protection enabled
Confirm that anti-malware protection is active on devices using this approach and has not been disabled or replaced by an ineffective configuration.
2. Security updates current
Check that malware detection capabilities, security intelligence and relevant protection components are kept up to date.
3. Real-time protection
Verify that applicable real-time scanning and protection features are enabled, rather than relying exclusively on occasional manual scans.
4. Unnecessary exclusions
Review antivirus exclusions and exceptions to ensure they are justified and do not unnecessarily weaken protection.
5. User permissions
Ensure ordinary users cannot routinely disable or alter protective controls without appropriate authorisation.
6. Device coverage
Check that laptops, desktops, servers and other in-scope devices have an appropriate malware protection approach for their platform.
SecureX7 helps automate assessment of supported security configurations, highlighting weaknesses that might otherwise be missed during manual inspection.
Its AI-powered actionable guidance helps explain identified gaps and recommend practical remediation, supporting a more consistent approach to Cyber Essentials readiness.
FREE 14-PAGE PRACTICAL GUIDE
Cyber Essentials Malware Protection Guide
Get Mark’s practical Windows 11 and SME guide to Microsoft Defender Antivirus, application allow listing and ransomware resilience.
Includes a Defender assessment checklist, read-only PowerShell verification commands, an evidence checklist and a practical four-week implementation plan.
Free PDF · 14 pages · October 2026 · No registration required
Related Controls
Malware protection works best when the other Cyber Essentials controls are effective
Malware Protection is one of five complementary technical controls. Its effectiveness depends on the security of the wider environment.
Secure Configuration
Removing unnecessary software, disabling insecure functionality and restricting application execution reduces the opportunities available to malicious code.
Security Update Management
Keeping operating systems and applications supported and updated reduces vulnerabilities that malware can exploit to gain access or spread.
User Access Control
Restricting administrative privileges and applying least privilege limits the damage malware can cause when a user account or device is compromised.
Firewalls
Appropriately configured host and network firewalls help restrict unwanted network connections and reduce opportunities for malicious communications.
Additional Malware Protection Guides
Microsoft Defender Antivirus and Cyber Essentials
Understand how to configure and assess Microsoft Defender Antivirus on Windows endpoints.
Application Allow Listing Explained
Learn how restricting executable applications can provide an alternative or additional layer of malware protection.
Ransomware Protection for SMEs
Explore practical measures to reduce the likelihood and impact of ransomware infections.
Windows 11 Security Hardening
Understand how secure Windows configurations complement anti-malware protection.
SecureX7 brings these security disciplines together through automated asset discovery, security configuration assessment, vulnerability identification and AI-powered actionable remediation guidance.
Discover weaknesses. Understand exposure. Prioritise action. Maintain protection.
Are Your Devices Really Protected?
SecureX7 helps you identify weaknesses in endpoint protection, assess your Cyber Essentials security posture and understand what needs fixing.
