Once an Exchanged account is synced with emails and contacts appearing on WP8 whats the best to secure this device to make sure it's fully secure before releasing it to employees?

What steps should i take? do i need to install additional apps? Is there a remote wipe?