Triage employee device compliance from patch age, encryption, EDR status, user role, and network exposure