Some ideas can be found here.
https://techcommunity.microsoft.com/t5/windows-security/hardening-windows-10-on-an-it-pro-s-laptop/m-p/180502
https://learn.microsoft.com/en-us/windows-server/security/security-and-assurance
--please don't forget to close up the thread here by marking answer if the reply is helpful--