Nothing you mentioned on the plus side is actually increasing security. It's really just compliance and potentially containment. Some things that could be done

Nothing you mentioned on the plus side is actually increasing security. It's really just compliance and potentially containment. Some things that could be done to increase security: - penetration tests paired with employee security training incorporating those results - updating every piece of software and IOT device as frequently as possible - don't use products that execute macros when you open documents and train users to click the allow button - have a functioning SSO system in place and don't rely on something being on the "internal network" as a security measure. Don't have credentials shared between employees, use SSO instead. - universal usage of MFA and password managers