HowyGuardHow do I check my antivirus and set up EDR?
On Windows, open Windows Security and check real-time protection, cloud protection and tamper protection are on. On a Mac, turn on the automatic security updates that keep its built-in protection current. If your form asks for a paid product or EDR, a tech can install one, such as Microsoft Defender for Business, on every computer.
Endpoint protection is antivirus on each computer. EDR goes further and records what happens on every computer in one place.
Check if you already have it
- Windows: open Windows Security, then Virus & threat protection. It should show no threats, or the name of your paid antivirus.
- Mac: open System Settings, General, Software Update, click the i next to Automatic updates, and check Install Security Responses and system files is on.
- EDR: if you're not sure whether you have it, ask your IT provider for the product name. Plain Microsoft Defender Antivirus is not EDR. Microsoft Defender for Business includes it.
Check every computer the business uses.
How to set it up
On each Windows computer:
Check malware protection is on with Windows Security
Windows, needs each computer, signed in
- Click Start, type
Windows Securityand open it. - Click Virus & threat protection. You should see No current threats or the name of your paid antivirus.
- Under Virus & threat protection settings, click Manage settings.
- Make sure Real-time protection, Cloud-delivered protection and Tamper Protection are On.
- Go back and click Protection updates, then Check for updates.
- Repeat on every computer the business uses.
How to show it's true: Screenshot the Virus & threat protection page on each computer, with the computer name and date noted.
- A setting turns itself back off: another antivirus may be installed. Windows Security will name it. Keep one, not two.
- Your form asks for a paid product: the built-in protection is solid, but it isn't paid. A tech can suggest a paid product that fits a small business.
On each Mac:
Keep the Mac's built-in malware protection up to date
Mac, needs each Mac, and an administrator account
- Every Mac has built-in malware protection (called XProtect). It is always on, and it stays current through updates.
- Open System Settings, then General, then Software Update.
- Click the i button next to Automatic updates and turn on Install Security Responses and system files.
- Open System Settings, then Privacy & Security, and under Allow applications from, choose the App Store and known developers option, not anything wider.
- Repeat on every Mac the business uses.
How to show it's true: Screenshot the Automatic updates options on each Mac, with the Mac name and date noted.
- Your form asks for a paid product: the Mac's protection is built in, not paid. A tech can suggest a paid product that fits a small business.
If your form asks for a paid product or for EDR by name, the built-in protection won't match that wording. A tech can set up a business product on every computer and tell you its name for the form.
How to show it's done
Screenshot the Virus & threat protection page on each Windows computer and the Automatic updates options on each Mac, with names and dates. If you have a paid product or EDR, keep its list of covered computers and check it against every computer you own. File them in your proof folder.
Common questions
Is Microsoft Defender enough?
It's solid protection. It isn't a paid product and it isn't EDR, so answer the exact question your form asks.
Do I need EDR on every computer?
If your form asks for a percentage, give the real number. Aim for every computer.
Two antivirus programs are installed. Is that better?
No. They get in each other's way. Keep one.
Sources
- Microsoft Support: Stay protected with Windows Securitysupport.microsoft.com
- Microsoft Learn: Microsoft Defender for Business overviewlearn.microsoft.com
- Apple Platform Security: Protecting against malware in macOSsupport.apple.com
- Canadian Centre for Cyber Security: Protect your organization from malware (ITSAP.00.057)cyber.gc.ca