Control Android version, security updates with SMC

Hello all,

 

Were about to deploy about 100 devices based on Android with sophos mobile control.
I'm looking for a ideal (best practise) situation to have full control on the current and future Android\Google updates.

We have already a configuration ready based on the right policies etc.
Were running: SMC Server version: 7.0.8 (rev 9453)

 

Thanks in advance.