text: Context :
  1: End user and server workload network traffic are segmented.
  2: We generally treat our physical office network as un-trusted and host most of our back-office internal tools through secure web portals. When employees need to connect to our production network, they use a VPN system that requires 2FA through our SSO provider.
  3: In terms of network segregation we follow AWS guidelines:
   - We apply isolation with among other things AWS VPC Security Groups.
   - We fully isolate our servers by functionality. We have content hosted through Amazon S3 in encrypted blocks and metadata through Amazon RDS encrypted at rest.
   - We do not share VPCs, EC2 instances, S3 buckets and databases instances between production and non-production.
   A description of our network flows is available in the XXX Company Enterprise Security and Systems document.
  4:Security groups have been configured to deny, by default, all traffic and allow only specific services to specific destinations within the production network.
  5:XXX Company is currently implemented an anti-malware policy to ensure that all workstations are equipped with up to date anti-malware softwares. Windows 10 has antivirus Windows Defender (https://en.wikipedia.org/wiki/Windows_Defender) by default.
  Instructions :
  Answer as truthfully as possible the following question based only on the context. 
  If you are not sure about the answer, you must write only No answer found.. 
  Without mentioning the context that was used to produce the answer, directly respond to the qu