Can I use free anti-virus software for SI.L1-b.1.xiii (Malicious Code Protection) in CMMC Level 1?
Last updated: 6/5/2025
CMMC Level 1 (SI.L1-b.1.xiii) requires malicious code protection but doesn't specify paid vs. free. Reputable free anti-virus software can be acceptable if it provides adequate protection, is regularly updated (SI.L1-b.1.xiv), and performs scans (SI.L1-b.1.xv) for systems handling FCI.