Google Workspace Security Checklist for Admins
The Google Workspace Admin console settings to change first, in priority order, for sign-in, Drive sharing, third-party apps and Gmail, with the menu path for each.
#2-step verification
Everything we have written about 2-step verification.