This talk keeps it simple, covering which software staff can install, why updates matter and what to do if something looks wrong. The guidance fills in the detail for whoever leads it.

Effective Training Talks

This training talk is supplied in fully editable MS Word format, prepared using the F-Q7 Training Talk Attendance Record form template. All text is in Calibri font for improved readability.
The following document labelling is included in the footer:

• Talk number and title
• Information-classification
• Version
• Page number / total pages

alphaZ documents - beautifully designed, tried and tested training talks. No junk, jargon or unnecessary content. Simple and usable training material developed over 25 years through practical use in the real world.

Further Reading

Further guidance on software and malware:

• Malware, Anti-Malware and Patching
• Phishing, Email and Social Engineering
• Information Security Incidents and Ransomware
• Information Security knowledge base

Logo Update Service

Download this training talk with your company name and logo already added!
Document Preparation is included with the alphaZ subscription.

How to Download

These files are included in the alphaZ subscription. The training talk is also included in the ISO 27001 and ISO 22301 toolkits, including the integrated toolkits that combine them.

Need Help Implementing?

If you'd like hands-on help preparing your information security risk assessment and treatment plan, our remote support services provide direct expert input from our team, by the day, by project, or on an ongoing basis.

Software and Malware Training Talk

A training talk on software and malware for all staff - installing only approved, licensed software, keeping it up to date, anti-malware protection and dealing with suspicious attachments, downloads and websites. The download gives you a one-page attendance record with the talk description already filled in, plus the full guidance document to run the talk from.

Two Files in One Download

• TT-8-03 Software and Malware - the attendance record, with the topic and talk description ready to use and a signature line for each attendee
• GG-8-03 Software and Malware - the guidance document the talk is based on, to prepare from and to issue to staff afterwards

Talk Description

• What software and malware are
• Installing only approved, licensed software
• Keeping software up to date, and controlling software development and changes
• Anti-malware protection, and never disabling it
• Suspicious attachments, downloads and websites
• What to do if you suspect a device is infected

Running the Talk

Read through the guidance beforehand, talk the points through with the team, then have everyone sign the record. Keep the signed record as evidence that the briefing took place and who received it.

Why a Suspected Infection Is Reported Straight Away

A device that might be infected is best dealt with early, before anything spreads to shared drives or other users. The talk closes with what to do if staff suspect a device is infected, so their first move is to report it rather than carry on as normal.

Adapting the Talk

Both files are fully editable, so add your approved software list, how staff request new software and who to contact if they suspect a device is infected. Update the talk description if you cover extra points.

Keeping the Training Record

File the signed record with your training records, or log the talk against each attendee in a training matrix, so you can show who has been briefed and when.

Who Is It For?

Every member of staff who uses a computer, laptop, tablet or phone for work. It works at induction, as a refresher and after a malware alert or a run of suspicious emails.

Included in the ISO 27001 and ISO 22301 Toolkits

This training talk is part of the ISO 27001 and ISO 22301 toolkits, and is included in the integrated toolkits that combine them.

Delivering Talks Regularly

Short, regular talks keep information security in front of people. Run this one alongside the other information security training talks to build awareness one topic at a time.

Related Training Talks

Other training talks that work alongside this one:

• TT-8-01 Information Security - General
• TT-8-02 Data Backup
• TT-8-04 Access Control and User Authentication