Evidence area
Cyber Essentials malware protection evidence
Cyber Essentials needs evidence that malware protection — antivirus, EDR, or built-in OS protection — is active across every in-scope device.
Where malware evidence usually fails
Most SMEs have antivirus installed somewhere, but can't quickly prove every device is covered, alerts are reviewed and exceptions are documented.
Examples of malware protection evidence
- Antivirus or EDR console screenshot
- Device coverage report from your security tool
- Built-in malware protection (e.g. Windows Defender, XProtect) settings
- Malware response or alert review notes
- Policy document covering acceptable software
- List of in-scope devices with protection status
How Evaud helps
Per-device linkage
Link malware evidence to laptops, servers and mobiles in your asset register.
Owner and review date
Each evidence item has an owner and review date — no surprise gaps at renewal.
Assessor visibility
Approved items appear in the read-only assessor portal without exposing raw consoles.
Frequently asked questions
Start building your Cyber Essentials evidence today.
Free to try. No credit card required.