how do you keep your work devices secure

I’m curious how others handle security on their work devices. Do you mainly rely on antivirus software and strong passwords, or do you also use things like MFA, device encryption, VPNs, and regular updates? What security practices have worked well for you?