Antivirus/anti-malware software should always be running on the computer to help ensure that your computer is protected.
The antivirus/anti-malware should always be up to date. In a large organization, this can be hard to manage. You can choose to have each computer gather the updates on their own from the Internet. Or you can have a centralized server that pushes out the updates to the other devices. The administrator would then need to be able to track updates to see if all devices got the updates.