Anti-virus mechanisms should be actively running and should not be disabled or altered by users, unless specifically authorized by management on a case-by-case basis for a limited time period
Recommended Mitigation
Ensure that anti-virus mechanisms are actively running and cannot be disabled or altered by users, unless specifically authorized by management on a case-by-case basis for a limited time period