Symantec Endpoint Protection vs System Hardening [on hold]

My IT Team is of the opinion that since they have installed Symantec Endpoint Protection software on my work laptop, there is no need for additional system hardening. They claim that SEP completely protects the system. However, I always thought that installing SEP was only part of the system hardening process and does not as itself comprise system hardening.

I am confused about the capabilities of SEP and a quick read up on the Symantec site did not convince me that SEP provided complete protection to the point that IT Team need not perform basic system hardening tasks such as disabling unused services, enabling system auditing etc.

So my question is this. After a fresh OS installation, is it enough if I just install SEP and do nothing further to harden the laptop.