Please can you explain clearly
I suggest you run a VirusScan deployment task daily for every clients, so you won't have to bother with Automatic Response (which is not usable for this type of requirement). If virusscan is installed, the deployment task does nothing, but if its uninstalled then it reinstalls promptly.
I think this is fairly an automated way.
In addition you could run a query for nodes - weekly or less often - that do not have virusScan installed and if you see a node that reports regularly yet does not have virusscan, then its a task for you to find out why the deployments task have not run on that client.
I think I will just run a report every day. In our environment it is a blend of SMS, ePO, and manual installation. We can remediate by one of these methods after reviewing the report.