Sophos have advised that after the Big Sur/macOS 11 upgrade, Sophos background scanning on Macs may stop running.
If you run the Sophos Endpoint console, you will see this error:
This is due to the difference in the operating system requiring permissions to run & as such, a user may get prompted to update the Full Disk Access permissions for the scanning extension.
NOTE: Users can do the below steps themselves or contact CSCS for assistance (CSCS Service Desk 01223 336261, or log a ticket at https://itsupport.medschl.cam.ac.uk/)
Please follow these steps:
Open the macOS System Settings (formerly known as System Preferences).
Select Privacy and Security.
Select Full Disk Access in the left list.
Select the Sophos Endpoint scan extension, even if it is toggled on, and click the minus sign at the bottom to remove it from the list.
Wait a minute, and the Sophos Endpoint scan extension should automatically re-appear in the list.
Select the toggle switch to turn on Full Disk Access.
You can watch this video to see a quick demo of the steps above:
https://techvids.sophos.com/share/watch/nBgBgc6cTjEBwfL2waXpEa?
For reference:
More information on the issue can be found via this Sophos article https://support.sophos.com/support/s/article/KB-000039501?language=en_US
From November 2022, Sophos advised that Apple have fixed this issue within Ventura/macOS 13