Every admin account is a way in. Remove accounts of people who left, give staff only the permissions they need, and review the activity log for actions you do not recognise. Consider blocking admin access from countries you never work from if your host supports it.
0 comments