5. Encrypt your hard drives using FileVault (macOS) or Bitlocker (Windows) and never leave your machine without locking it.

Asking Karen in accounting to give 2 flips about filevault is absurd. Create a corp policy that encrypts by default.....this is what I'm talking about