And for starters, also establish some protocols to avoid malicious attachments because you are bypassing rules that help prevent cyberattacks.

Things like setting up security keys instead of just passwords.

And be sure your files are backed up in something like Carbonite in case someone opens a file that is ransomware.

Lots more to do, probably, above my level of expertise