I'm glad you clarified this, because I was confused by it. For anyone questioning AV, I'd recommend talking to someone who's worked in a service provider. That

I'm glad you clarified this, because I was confused by it. For anyone questioning AV, I'd recommend talking to someone who's worked in a service provider. That being, managing: -Businesses that are not overly technical. Specifically, it's easy to work in a technical environment where users know better and provide an artificial shielding -Inheriting AV solutions, and therefore working with 5-6 different vendors at any one time. It's not a matter of "get a better product" -Businesses that consider themselves too small to implement good policies, or force users to tolerate lockdowns in any way Anyone in that position will talk about seeing cryptolocker having walked right past well managed AV products, not just once or twice, but weekly, for the past few years. They will also have horror stories about outages caused by AV themselves. I have a hard time with anyone claiming to AV is an effective requirement beyond politics and insurance policies.