Again, users should ask whether the vendor provides up to date virus information, but there is no gauge of the quality of that information. Some very vague and general discussions touch on a few of the points, but many questions are simply listed with no discussion whatsoever. The second chapter deals with general antiviral aspects. The discussion of antiviral actions and functions does cover a wide range, but explanatory information is very limited. In a similar way, the statement is made that all certification tests should use at least 100 versions of every polymorphic virus.
Much space is occupied by material copied from certification company Web sites.
No mention is made of the fact that ICSA charges vendors for certification, or the implications that fact might have. Chapter three states a concentration on desktop, or non-server, considerations, but duplicates much of the relevant material from chapter two. Chapter four then turns to server factors, but extraordinarily briefly. The section on antivirus deployment and maintenance has the largest checklist in the book. There is a great deal of duplication, at least in terms of the concepts touched on.