Manage antivirus configuration

Where allowed by the specific antivirus package selected, all installations should be managed centrally. Access to antivirus configuration, along with the ability to disable it, should not be present on local workstations or servers. Logs should be reviewed regularly to ensure that updates are being properly applied to the selected hosts.

Management servers should be accessible to all SCADA hosts. In some cases, it will be necessary to deploy additional management servers for bandwidth-constrained sites. Many antivirus applications have tools or agents that can act as a lightweight management server for remote sites to get around bandwidth or latency related network issues.