Control Android version, security updates with SMC

Hello all,


Were about to deploy about 100 devices based on Android with sophos mobile control.
I'm looking for a ideal (best practise) situation to have full control on the current and future Android\Google updates.

We have already a configuration ready based on the right policies etc.
Were running: SMC Server version: 7.0.8 (rev 9453)


Thanks in advance.