The BEST way to secure the most vulnerable attack vector for a network is to:

A.
Update all antivirus definitions on workstations and servers.

B.
Use biometrics and SSO for authentication.

C.
Remove unneeded services running on the servers.

D.
Provide end-user awareness training to office staff.