Patch and secure your operating systems and third-party applications.
Prevent all other apps from running while practicing the principles of least privilege.
Add advanced anti-malware and AV capabilities, device control, and global policy for all devices.