Cyber Essentials · derived mapping target
CE5.1Operate a malware protection mechanism
Ensure an active malware protection mechanism is in place on every device in scope, whether built into the operating system or supplied by a third party, to prevent malware being delivered or executed.
Mapping at a glance
CE5.1Operate a malware protection mechanismCyber Essentials
CE5.1 is covered by 7 Sekit CSF controls. +2 more in the table below. Open in the full graph →
Mapped from the Sekit CSF
The Sekit controls that cover this requirement, lens by lens.
RCF-0141Container security · TechnicalRCF-0148EDR/anti-malware · PolicyRCF-0149EDR/anti-malware · ProcessRCF-0150EDR/anti-malware · TechnicalRCF-0346Workload protection · PolicyRCF-0347Workload protection · ProcessRCF-0348Workload protection · Technical
ISO/IEC 27001:2022 · Annex A controls counterparts
Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.
NIST CSF 2.0 counterparts
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Endpoint protection console
The antivirus or advanced protection (EDR) tool installed on devices, and proof that it is deployed and up to date across the fleet.
From the Sekit evidence catalog
Related controls
Via the shared Sekit CSF topic, not the framework's own index.
Ask Sekura: “What evidence proves CE5.1?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk- In Claude or ChatGPT, add a custom connector and paste this URL.
- Sign in with your email to finish. Free, read-only, no organization required.