Lock up your Devices!
There is so much garbage on the internet, making it so easy to pollute your company's computers with nasty malware. It's no joke these days either; some bad people are developing programs like ransomware (which holds your computer hostage until you pay hackers in crypto-currency), keystroke tracking, and computer-camera hijacking, to name a few.
Having your hard drive encrypted coupled by solid anti-malware is a foundation to good security that IT people have been talking about for years. With encryption via BitLocker or Azure Disk Encryption, coupled by Windows Defender ATP, you don't have to worry about ransomware because all of your files are in the cloud (thanks to OneDrive 😉) and are kept secret!