Silly compliance checkbox perhaps? I'm vaguely aware that certain PCI standards require organizations to install anti-virus software with specific requirements.