List of GPO's for security in your domain
This is a great list of GPO's. Check them out and apply them to your domain. Many of them are ones that are on the board.
https://www.lepide.com/blog/top-10-most-important-group-policy-settings-for-preventing-security-breaches/