Configure BitLocker on all secondary internal drives to prevent data exfiltration if a stolen computer's hard drives are physically removed.