The company formally requires endpoint detection and response or anti-malware protection on all devices
Sekit's EDR/anti-malware policy, one of the topic-specific policies A.5.1 expects, requires approved endpoint protection on every company device that nobody may disable.
This policy facet requires approved endpoint protection on every device that nobody may disable, the written commitment behind A.8.7's malware defense.