Step 6 of 7
Malware protection
Malware protection stops harmful software running on your devices. Cyber Essentials expects every in-scope device to be protected.
How to do it
Protect every computer
Windows includes Microsoft Defender Antivirus. Make sure it's switched on, with real-time protection enabled and updates installing automatically. Macs need a dedicated anti-malware product, such as Microsoft Defender for Endpoint, unless you control exactly which apps can run.
Block malicious websites
Turn on the protection built into your browser and operating system, such as Microsoft Defender SmartScreen. DNS filtering services can block known scam and malware sites across every device.
Only install apps from official stores
Phones and tablets should only install apps from the App Store or Google Play. Don't allow apps from other sources.
Common reasons people get caught out
- A free antivirus trial that quietly expired
- Personal phones with apps installed from outside the official store
- Macs with no anti-malware at all
Your checklist for this step
- Anti-malware on every device, kept up to date
- Known malicious websites blocked
- Phone and tablet apps only from official stores
This guide summarises Cyber Essentials Requirements v3.3 for small businesses. It is general guidance, not the official question set. Check the current requirements on the IASME website before you submit. Last updated 2 November 2026.