Hi Sridhar,
This is a vast topic and I will suggest you to review Microsoft Purview for Data and Security Compliance, https://docs.azure.cn/en-us/purview/purview Good to have MAM policy inplace and I will also suggest you to work around Conditional Access Policies to lock down the other requirements and this should cover all the basis security settings for Windows and MacOS.
Also this will ensure sensitive data is protected via Purview and alerts are sent out.
Hope this helps.
JS
==
Please Accept the answer if the information helped you. This will help us and others in the community as well.