Cisco strongly recommends that you install a security agent to protect your servers against unauthorized intrusion. Cisco offers two security agent options: Cisco Security Agent (CSA) for Cisco CallManager and Management Center for Cisco Security Agent (CSA MC).
Check this document for more details:
Which Cisco IP telephony applications may I install on the Cisco CallManager server?