What can a company do to prevent incidences of theft or harm to its company's resources including data and humans?

Hire trustworthy folks. Do background checks when hiring, and each five years. Give polygraph each year. Limit physical access to areas, and firewall data systems, and keep records of who accessed what. Use passwords that record who does what.