• Enforce Multi-Factor Authentication (MFA) for all accounts.
• Use strong, unique passwords and change them periodically.
• Disable unnecessary accounts and limit privileged access.