What’s your budget & what are you protecting? Without that info, I think one of the only universal recommendations (whether you’re a trillion dollar FAANG or 2

What’s your budget & what are you protecting? Without that info, I think one of the only universal recommendations (whether you’re a trillion dollar FAANG or 2 person startup) is buy U2F keys for everyone* and enable them everywhere. Also try to know what assets you have, and patch everything regularly. * yubico make great U2F keys which I recommend. Others such as google also make keys