Rules for Handling Third-Party Software

An interesting side effect of the previous policy statement is that it implies that program installation disks also should be scanned. Although it is rare, there have been cases where vendors have not been careful and distributed their programs with a virus. When this was shown to some security administrators, most seemed to agree that scanning distribution disks is a good precaution.

Most vendors go out of their way to ensure that the media they distribute do not contain viruses. They want to avoid the embarrassment and liability when customers’ systems are infected because of their software. Some even advertise their master copy was scanned with a particular virus scanning software before duplication. ...

Get Writing Information Security Policies now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.