Enable automatic screen lock to computers and mobile devices
Automatic locking, after a pre-determined period of inactivity (usually a few minutes), means that a user does not need to worry about leaving their device open to be accessed; it locks itself and is protected by a pin code (or other 1FA system).
An unlocked workstation or mobile device can divulge information when it is manipulated by a third person, who is either physically present or accesses the station by a cabled and/or wireless connection. The user will not even be aware of the data theft.
Always lock workstations (CTRL + ALT + DEL or Windows Key + L) when absent and also secure laptops with a laptop lock and a key to prevent theft.