Security tools

Answer:

It's our policy not to make recommendations about specific tools, since the selection of a tool will depend on specific requirements and needs of each organization.

Regarding steps to protect users accounts, the most important is to establish an access control policy covering among other things:
- Periodic change of passwords
- Periodic review of user's access and activities
- Use of different passwords for each account

These articles will provide you further explanation about access control:
- How to handle access control according to ISO 27001 https://advisera.com/27001academy/blog/2015/07/27/how-to-handle-access-control-according-to-iso-27001/
- How two-factor authentication enables compliance with ISO