Fortinet highlights zero trust, MFA, identity and access management, EDR, patch management, encryption, and network segmentation as key practices. The guide notes that MFA blocks over 99% of credential-based attacks. [2]
https://www.fortinet.com/resources/cyberglossary/cybersecurity-best-practices