As an End User #IT #Support and as a #Sys #Admin IT Support this is what I've done:
Sourced, Orchestrated, Planned, and Executed the Privilege Access Management solutions based on the Least Privilege model.
Automated all COTS and Windows Updates weekly.
Created a simply streamed line system image rollout, update, and upkeep.
Implemented additional solutions when it comes to human security to mitigate risk.
Implemented Bitlocker drive encryption using TPM.