Securing Employee Laptops from Data Breach

I need a professional to help configure restrictions on my employees' Windows laptops to secure our organization's code. Key Requirements: - Block access to personal repositories, cloud storage services, and personal email services. - Ensure these restrictions are implemented using a reliable third-party software or suggest if there any better way to configure it by using group policy settings or any other which minimize the cost - Configure USB port restrictions to prevent unauthorized data transfer through external devices. The ideal candidate for this project should have extensive experience with Windows operating systems and be knowledgeable about reputable third-party software for implementing such restrictions. They should also have a deep understanding of data security and the importance of protecting proprietary information.