Please add additional sign in restriction settings to Neos that block signing if a condition is met or unless a condition is met:
Some suggestions:
Add Geo blocking to block logins from other countries
Add work hours to staff profile settings to control when users can log in
Add a white list by IP address to Neos settings to allow logging in only from authorized locations