There are some very basic security measures you can use that offer really high levels of protection for your business. Multi-factor authentication is one of those. It requires the user to enter a username and password, then a time-sensitive code sent via text or email to gain access. This means that even if the username and password are compromised, it is still inconvenient for the attacker to access sensitive content.
The below video explains what is exactly it is and how you really need to have it working within your business environment.