Entity requires that all critical servers are protected by malware-protection software