System and Information Integrity

• The institution shall identify, report, and correct system security flaws on time.
• The institution shall protect malicious code (malware) within institutional digitalization systems and update malicious code protection mechanisms when new releases are available to make sure that detected malicious software is addressed.
• The institution shall monitor system security alerts and advisories and take action as soon as they are published.