SI-3(4): Malicious Code Protection | Updates Only by Privileged Users
Control Text:
Update malicious code protection mechanisms only when directed by a privileged user.
Protection mechanisms for malicious code are typically categorized as security-related software and, as such, are only updated by organizational personnel with appropriate access privileges.