The National Security Centre (NCSC) guidance for SMEs to help protect your organisation and email accounts from future compromise:

https://www.ncsc.gov.uk/section/information-for/small-medium-sized-organisations