There has been some debate on the importance of antivirus software over the past few years. Some see antivirus as a way to satisfy risk controls and form part of an organisation’s information security strategy and insist on antivirus being installed on all an organisations machines. However this demand for antivirus has led to a number of ineffectual products being released.
In this paper the NCC Group Technical Director’s Forum will argue that antivirus is no longer relevant to many of modern cyber security threats that organisations face today. The paper will first look at the deficiencies with signature based antivirus before moving on to explore the new challenges that mobile computing brings, and suggesting other more effective ways of managing an organisation’s risk.
