License compliance
Operating within the seat counts and terms of every software license you have purchased.
Compliance has two failure modes: over-deployment (more users than seats) and contract drift (using a feature your contract does not include).
A monthly reconciliation of seats deployed vs. seats owned is the single highest-leverage SAM control.