Antivirus Policy & Best Practices

Policy Summary

All company-owned devices must have the approved endpoint security suite installed and kept up to date. Disabling or circumventing endpoint protection is a policy violation.

Approved Security Tools

• Endpoint Protection: CrowdStrike Falcon
• Vulnerability Scanning: Tenable Nessus (managed by IT)
• Email Security: Microsoft Defender for Office 365

If Your Device Is Flagged

1. Do not ignore alerts from the security agent.
2. Disconnect from the network immediately if prompted by IT.
3. Contact the Security team via security@company.com or ext. 5401.
4. Do not attempt to remove the detected threat yourself.

Reporting Suspicious Activity

If you receive suspicious emails, links, or notice unusual device behavior, report it immediately using the Report Phishing button in Outlook or email the Security team.