Require multi-factor authentication for sensitive roles and environments.