Best practice MultiSig and Audits

Hey All

We are a new token and we're getting listed in a few locations. We're finding uptake of the token to be a little slow and we attribute this to a few things: marketing hasn't really started yet, plus the listings and perhaps also we haven't got things in to order wrt our wallet. We seek advice on what the best practice might be to shift tokens from the owner wallet and into a multisig wallet? Also, if anyone has experience with Solidity audits (we do, but they're security audits and static code analysis) then we would be thrilled to hear what the consensus is? We want to do everything legit and we do not want to be perceived as a rug or a scam (which we are not). Founder details are here: https://www.linkedin.com/in/moneyshot/ and the rest of the team have either announced themselves on StalkedIn or are in the process of going public.. We come from an industry that has best practice plastered all over it, so we really seek advice on whether there is a best practice or agreed good practice / standard for multisigs (which multisig would be good to know also) and audits? Thanks in advance for reading and any replies :)

Un cordial saludo, Mit freundlichen grüßen, Kind regards ..