🦠 Antivirus Definition Management

1. Purpose

This document describes Nemu Inc.’s process for ensuring that endpoint protection and antivirus solutions remain up to date.

2. Scope

Applies to workstations and laptops used to access Nemu Inc.’s internal systems and customer data.

3. Approach

• Where antivirus or endpoint protection tools are used, they are configured to:

  • Automatically update virus definitions and signatures.
  • Receive engine updates from the vendor.
  • Perform periodic scans.

• On platforms where built-in protections exist (e.g., modern operating systems), Nemu Inc. ensures:

  • These protections remain enabled.
  • OS updates, which often include security enhancements, are installed regularly.

4. Monitoring and Exceptions

• Users are instructed not to disable antivirus or endpoint protection.
• Any necessary exceptions (e.g., for development tools) are evaluated and documented.

5. Audit Evidence

• Screenshots or reports showing antivirus definition status.
• Endpoint management or MDM reports, if applicable.
• Internal guidance on endpoint protection requirements.

6. Compliance Mapping

• SOC 2: CC7.1
• ISO 27001:2013: A.12.2.1

Contact: support@mynemu.com
© 2025 Nemu Inc.. All rights reserved.