detection of, malware and measures for recovering information systems from malware attacks; Additional Guidelines 1. The intermediary shall establish measures under Clause 23(2), at a minimum, as follows: (1

for operations security relating to information systems in accordance with the following criteria: (2) establish measures for prevention against, and detection of, malware and measures for recovering