If you're buying a laptop, buy a model that comes with Intel VPro.
The Intel VPro comes with TPM - Trusted Platform Module chip which enables Full Disk Encryption.

Next is to purchase apps that uses TPM, the difference between other apps and apps that uses TPM is, TPM is almost impossible to crack.
It stores the key in the chip itself. In case your laptop is stolen, the person may not be able to access the PC at all, only format it, however remotely when the PC is turned on and has internet connection, you may be able to delete files and detect the location.