Implementing data loss prevention (DLP) will help prevent the exfiltration of intellectual property by monitoring and controlling the movement of sensitive data.
Deploying directory-based group policies can help enforce strong password policies, restrict access to sensitive resources, and ensure that security settings (such as encryption) are applied to files and systems across the organization. These actions directly address the identified vulnerabilities.