Malware Protection
Cyber Essentials — Malware Protection
The Cyber Essentials Malware Protection control requires that all devices have active defences against malicious software. This means real-time antivirus running on every device, safe browsing protections enabled in your browser, and safe habits around email attachments and downloads. These guides cover every Malware Protection requirement for home users and businesses.
What this control covers
- ✓Enable real-time virus and malware protection on all devices
- ✓Turn on phishing and malware warnings in your web browser
- ✓Avoid opening unexpected email attachments or clicking unfamiliar links
- ✓Install and maintain approved security software on all business devices
Malware Protection Guides (8)
- Enable real-time virus protection on all devicesMake sure a reputable antivirus / anti-malware tool with real-time scanning is active on every computer you use.
- Enable safe browsing in your web browserTurn on phishing and malware protection in Chrome, Firefox, Safari, or Edge to warn you before you visit dangerous sites.
- Never open unexpected email attachments or linksTreat any unexpected file attachment or link — even from someone you know — with suspicion before you click.
- Install approved security software on all business devicesEnsure every device used for work has an approved, up-to-date endpoint protection tool installed and monitored.
- Learn how to spot a phishing emailLearn the three things to check before clicking any link in an email. Phishing is responsible for the majority of account takeovers and business email compromises in the UK.
- Learn to recognise common UK scamsGet familiar with the scams most commonly used against people in the UK right now — from fake parcel delivery texts to HMRC phone calls. Knowing what to expect is the first line of defence.
- Set up email authentication for your domain (SPF, DKIM, DMARC)Add SPF, DKIM, and DMARC records to your domain's DNS settings. These prevent attackers from sending emails that appear to come from your business — protecting your clients, suppliers, and reputation.
- Only install apps from official app storesOnly download apps from the Apple App Store or Google Play Store — never from links in emails, text messages, or websites. Apps from unofficial sources bypass the security checks that Apple and Google apply to every app.
Track your Malware Protection progress — free
Create a free account to check off tasks as you complete them and see your overall Cyber Essentials alignment score.
Start your free security check