Using up to date software with all known patches applied, and encrypt all data using some approved OSS infra(I am not expert on this, so not sure what it would

Using up to date software with all known patches applied, and encrypt all data using some approved OSS infra(I am not expert on this, so not sure what it would be) takes only from freedom of negligence.