Cyber Essentials: Malware Protection
The Cyber Essentials Malware Protection control requires that all devices have active defences against malicious software. This means real-time antivirus running on every device, safe browsing protections enabled in your browser, and safe habits around email attachments and downloads. These guides cover every Malware Protection requirement for home users.
Last reviewed: July 2026
Cyber Nova AI helps you prepare for Cyber Essentials. It doesn't award or certify it. Follow the steps here to get ready, then apply for certification through an accredited Cyber Essentials body when you're set.
What this control covers
- ✓Enable real-time virus and malware protection on all devices
- ✓Turn on phishing and malware warnings in your web browser
- ✓Avoid opening unexpected email attachments or clicking unfamiliar links
- ✓Install and maintain approved security software on all business devices
Malware Protection Guides (11)
- Enable real-time virus protection on all devicesMake sure a reputable antivirus / anti-malware tool with real-time scanning is active on every computer you use.
- Only install apps from official app storesOnly download apps from the Apple App Store or Google Play Store, never from links in emails, text messages, or websites. Apps from unofficial sources bypass the security checks that Apple and Google apply to every app.
- Learn how to spot a phishing emailLearn the three things to check before clicking any link in an email. Fake phishing emails are responsible for the majority of hacked accounts in the UK, and they are getting harder to spot.
- Never open unexpected email attachments or linksTreat any unexpected file attachment or link, even from someone you know, with suspicion before you click.
- Learn to recognise common UK scamsGet familiar with the scams most commonly used against people in the UK right now, from fake parcel delivery texts to HMRC phone calls. Knowing what to expect is the first line of defence.
- Enable safe browsing in your web browserTurn on phishing and malware protection in Chrome, Firefox, Safari, or Edge to warn you before you visit dangerous sites.
- Install approved security software on all business devicesEnsure every device used for work has an approved, up-to-date endpoint protection tool installed and monitored.
- Set up email authentication for your domain (SPF, DKIM, DMARC)Add SPF, DKIM, and DMARC records to your domain's DNS settings. These prevent attackers from sending emails that appear to come from your business, protecting your clients, suppliers, and reputation.
- Turn on Gatekeeper to run only trusted appsMake sure macOS is set to allow apps only from the App Store and identified developers, so unverified software can't run without your say-so.
- Learn to spot and report scam textsGet familiar with the scam texts common in the UK, and know how to report them free so the networks can block them.
- Install software only from trusted sourcesStick to your distribution's official repositories, its app store, or trusted formats like Flatpak, and avoid pasting install commands from unknown websites.
Test yourself
A few quick questions to check what you have learned. Pick an answer to see whether it is right and why. Nothing is saved or scored.
Track your Malware Protection progress. Free.
Create a free account to tick off tasks as you complete them and see your overall Cyber Essentials readiness score.
Start your free security checkCommon questions
What is malware?
Malware is software designed to disrupt, damage, or gain unauthorised access to a system. It includes viruses, ransomware, spyware, and trojans. Under Cyber Essentials, the Malware Protection control requires that all devices used for work have active defences against malware, including real-time antivirus protection.
Does Windows include antivirus software?
Yes. Windows includes Microsoft Defender, which provides real-time malware protection at no cost. It updates automatically through Windows Update. For most home users and small businesses, Defender is sufficient to meet the Cyber Essentials malware protection requirements.
What does Cyber Essentials require for malware protection?
Cyber Essentials requires that all devices have active, up-to-date antivirus or endpoint protection software running in real-time. Scheduled scans are not enough on their own. The software must be kept updated automatically so it can recognise the latest threats. Cyber Essentials lets you meet malware protection in more than one way. The usual route is anti-malware software running in real time, but only allowing approved applications, for example installing solely from official app stores, is also accepted.
Do phones and tablets need malware protection?
For iPhones, Apple's sandboxing means third-party antivirus apps provide limited benefit. For Android, the most effective protection is keeping the operating system and apps updated and only installing apps from the Google Play Store. Under Cyber Essentials, mobile devices used for work must still meet the malware protection requirements.