Nothing you mentioned on the plus side is actually increasing security. It's really just compliance and potentially containment. Some things that could be done to increase security:

- penetration tests paired with employee security training incorporating those results

- updating every piece of software and IOT device as frequently as possible

- don't use products that execute macros when you open documents and train users to click the allow button

- have a functioning SSO system in place and don't rely on something being on the "internal network" as a security measure. Don't have credentials shared between employees, use SSO instead.

- universal usage of MFA and password managers