While there is no one-size-fits-all to security, here are some recommendations that organizations can use to reduce the threat of initial access brokers (IABs).
https://www.securitymagazine.com/articles/98405-initial-access-brokers-the-new-face-of-organized-cybercrime