Where applicable, Entity ensures that endpoints with access to critical servers or data must be protected by malware-protection software