SI-3(6): Malicious Code Protection | Testing and Verification
Control Text:
(a) Test malicious code protection mechanisms [Assignment: organization-defined frequency] by introducing known benign code into the system; and
(b) Verify that the detection of the code and the associated incident reporting occur.