Agencies are required to have a virus prevention program that includes:
A. Maintaining virus scanning software on all servers and workstations.B. Keeping virus signature files and scanning engines updated on a schedule relevant to the system. Workstations must be updated at least weekly, and servers must be updated at least daily. A more stringent schedule may be adopted if the agency deems the machine a higher risk.C. Scanning all file attachments sent or received via e-mail using current anti-virus software.D. Scanning all removable media upon connection/ insertion using current anti-virus software.E. Immediately removing any infected workstation or server from the network until the virus has been cleaned.F. Maintaining copies of virus-detection tools offline.G. Keeping all servers and workstations current with operating system and software security patches.H. Disabling Auto Play on all workstations and laptops.I. Reporting all virus activity that is not automatically cleaned by the virus protection software to ISD as a security incident. Refer to Chapter 3 of the ESP for details regarding incident reporting. Miss. Code Ann. § 25-53-1 to § 25-53-25.