CISA recommends turning on multifactor authentication across systems such as email, file storage, and remote access. Its guidance also stresses layered data protection and backup practices to reduce the impact of attacks and outages.
https://www.cisa.gov/resources-tools/resources/four-cybersecurity-essentials-businesses