What Malware Protection Does Cyber Essentials Require?

What Malware Protection Does Cyber Essentials Require?

Last updated: 3 October 2026

Malware protection is the control that stops viruses, ransomware and other malicious software from running on your devices. Cyber Essentials lets you meet it in one of three ways.

It is the fifth of the five Cyber Essentials technical controls from the National Cyber Security Centre (NCSC), and it applies to every in-scope computer, phone and tablet.

What Cyber Essentials requires

• Anti-malware software installed on in-scope devices, kept up to date, set to scan files automatically and to warn about malicious websites.
• Or application allow-listing, so only approved software can run, with a clear process for adding new apps.
• Or sandboxing, where apps run in isolation from the rest of the device.
• On phones and tablets, apps installed only from the official app store, with unapproved apps blocked.

Where businesses most often slip up

• Devices with no protection installed, or where the licence has lapsed.
• Anti-malware that is installed but not updating or not scanning.
• Staff able to install any software they like.
• Personal phones and tablets used for work without any controls.

How ABCOM helps

We deploy and monitor modern endpoint protection across your devices, make sure it stays up to date, and report on any device that falls out of protection. That gives you proper protection day to day and the evidence you need for Cyber Essentials.

This is one of the five Cyber Essentials technical controls. Not sure whether your business would pass? Take our free 4-minute readiness quiz, or book a free cyber security review.