A large enterprise uses advanced encryption to protect its sensitive data at rest and in transit. Despite these measures, the organization is concerned about the risk of data exposure through endpoint devices. Which of the following strategies would most effectively mitigate the risk of data exposure through endpoints?