S 4.33 Use of a virus scanning program when exchanging of data media and data transmission

Initiation responsibility: IT Security Management

Implementation responsibility: IT-user

In addition to the instructions described in S 2.3 Data Media Control, a virus scan should be carried out immediately before and after data transmission as well as when floppy disks or other data media are exchanged or sent (cf. S 4.3 Periodic runs of a virus detection program). It must be ensured that the virus scanning program used can also to detect macro viruses.

A protocol of the sender-check should accompany data media or files sent via remote-data transmission. It is advisable to make a copy of such protocols. Recipients can use these protocols to gain a first impression of the integrity of the transferred data, but are nevertheless bound to carry out a renewed virus scan. If any complaints arise, the sender will be able to demonstrate that a virus infection probably occurred after the data was transmitted.

Additional controls:

• Is the latest possible virus scanning program being used?

• Is the data intended for transfer scanned for viruses beforehand?

• Are protocols of such checks transmitted to the recipient?

• Are received files and data media checked for virus infection before being imported?