Requirement 5: Protect all systems against malware

Target had antivirus software deployed - The requirement was met on paper - However, the BlackPOS malware was custom-made and evaded signature-based detection