Sophos Endpoint needs several permissions on a Mac to protect the device and update itself. You need your Mac password.
1. Allow system extensions
Open Apple menu › System Settings › Privacy & Security.
Under Security, click Details next to “Some system software requires your attention …” and enter your Mac password.
Turn on all entries with Sophos in the name (e.g. Sophos Network Extension, SophosScanD) and click OK.
Confirm further prompts, e.g. for network filters, with Allow.
2. Allow Full Disk Access
In Privacy & Security, open Full Disk Access.
Turn on all entries with Sophos in the name.
If SophosUpdater is missing: click + at the bottom, press ⇧ + ⌘ + G, enter /Library/Sophos Anti-Virus/, select SophosUpdater.app, click Open and turn on the entry.
If the message Quit & Reopen appears, confirm it.
3. Check
In the menu bar, click the Sophos icon › Open Sophos Endpoint ….
Click About in the bottom right. If an update is pending, click Update now.
Open Run diagnostic tool › Prerequisites. All items must be met.
Close all programs and restart the Mac.