Use strong unique credentials, MFA where available, limit administrative exposure and monitor server/security logs.