Blue teams, what has had the most impact protecting against cyber attacks?

Security blue teams or defenders of HN, what were the changes you made that have had the most impact in improving the resilience of your organisation to cyber attacks ?