Establish the use of MFA when accessing emails, applications and VPNs and other remote sessions for all users. Stronger authentication methods make it harder for adversaries to access sensitive information.