Enforce separation of duties and least privilege access.

Conduct organization-wide security awareness training.

Implement logging for all access activities.

Implement strict security policies and password controls.