Every company who is serious about Apple - and security - absolutely needs these three foundational items:
1. Always purchase devices directly from Apple or an Apple Authorized Reseller.
2. Set up an Apple Business Manager (ABM) account.
3. Use an Apple-native mobile device management (MDM) tool.