We see many covered entities that do NOT maintain their anti-virus. It is EXTREMELY important that your IT staff (MSP) keeps the anti-virus definitions set for auto-update and that the anti-virus software itself is updated as needed. We suggest that you have a monthly review of each computer and make sure the anti-virus software and definitions are current and working correctly.
It’s wise to review your anti-virus solution each year too. There are usually a few top tier solutions that keep their software near the best in the market. Others may be “reviewed” and “voted” as the best for a given year, but changes in the cyber-security world make them less useful as time goes on. Make sure your anti-virus is a top tier solution that provides the best in class anti-virus solution.