How to secure a corporate google account?

Question

Google

We use a common google account within the company - for corporate mail, to access google drive.
How to protect an account if you use one is understandable - phone or verification through the application. But what about in our case - you need to protect yourself (we change the password monthly, but we don’t want to refuse additional verification), what methods are there?

Answer 1

Register a separate account for each and delegate access from them to the corporate
one. Well, Google Drive can be shared.
Accordingly, we put a password on the corporate one and forget it (just kidding), and on our accounts we use additional verifications

Answer 2

Two-factor authorization on the CEO's phone, and issuing a code only against signature.

Answer 3

As for me, there is a high risk of information leakage: the staff is not always qualified in information security issues, incl. former, access from outside, incl. their virus-infected PCs or smartphones. I advise you to look for other solutions.