how to know if my organization's computers are running AMP??

[richardbc]

is there any way to know or scan a network where my computers resides and know if a computer is not running AMP for Endpoint and install it??

[brmcmaho]

One option is use ISE posture checking and client provisioning.

Some AMP customers use other methods, including Active Directory policies or the AnyConnect AMP enabler module.

[Marvin Rhoads]

I agree - AD GPOs or some sort of network access control that checks posture is the best way.

I have used ISE for just this quite nicely with a customer. It's part of a much larger set of things ISE can do and does require Base + Apex licenses.

The best solution for you depends a lot on what your infrastructure currently looks like - how many computers, locations etc.