A jump host needs to be set up on a security-hardened machine. It also needs strong authentication, which could include requiring stronger passwords; the use of multifactor authentication; aggressive monitoring and alerting; drastic restrictions of which programs that can run on the jump server; and using access control lists to restrict role access to the [bare minimum needed for people to do their jobs](/learn/principle-of-least-privilege/).