1. Only let people who are supposed to use your systems log in.
  2. Everyone gets their own account. No shared passwords.
  3. Disable accounts when someone leaves.