Yes, antivirus is considered as the minimum security standard. Endpoint detection and response tools are an additional grade of security to deal with advanced threats that are not normally detected by AV tools.