For a laptop I'd say full disk encryption should be on the list.