SI-3: Malicious Code Protection

personnel or roles to be alerted when malicious code is detected is/are defined;

the frequency at which malicious code protection mechanisms perform scans is defined;

action to be taken in response to malicious code detection are defined (if selected);