If we assume a safe workplace, then keeping it safe is a serious task. Most importantly, the workplace should always be up-to-date. For the OS, hardware, installed programs, antivirus/antimalware. By using Bitlocker and MFA, we make sure access is difficult. With policies for the firewall and by using monitoring we keep a tight rein on things.