If you are using an unmanaged antivirus, how are you getting alerted if there is a potential threat on a workstation or server? ECT recommends using a managed antivirus so that when you have a threat it is addressed before it becomes a larger problem that causes you unexpected downtime. ECT staff proactively monitors their managed antivirus clients to ensure that workstations are virus/malware free.
A new trend among criminals is pretending to be someone/something to gain access to key information or systems. ECT has staff that will impersonate their way into your office by phone or in person to see what your staff will allow them to access, which will test your process controls in a safe and controlled way.