When upgrading SEPM from version 11.x to 12.1, extra default built-in Application and Device Control (ADC) rules that comes with SEPM 12.1 are missing.
After upgrade, SEPM only shows original built-in ADC rules as they were from version 11.x whereas installing a fresh SEPM 12.1 will have new 16 built-in rules.
This is by design, it is to ensure there are no unwanted changes to the existing modified policy rules when upgrading from version 11.x
Additional rules in version 12.1 can be added by importing the attached .zip file which contains the rest of the rules.
SEPM upgraded from 11.x to 12.1