> What is the next step that needs to be done so our employees can be secure without a company issued laptop?

If the data is important, it should be on a work device.