I believe a company would be doing themselves a major disservice if they were not using a multi-signature scheme to protect their important funds. Each withdrawal from the company funds should need to be authorized by a minimum threshold of private keys controlled by key persons, preferably technically-minded higher-ups.
Different blockchains have slightly different approaches to this functionality, but the solution almost always involves the use of an m-of-n multi-signature wallet. Such a wallet requires any outbound transaction to be signed by m of n private keys (in this case presumably owned by m of n people) to be considered valid on the blockchain. These private keys can be kept in software, on paper, or in specialized hardware devices ("hardware wallets"), which many people find to be an acceptable trade off between security and ease-of-use.
Taking the Bitcoin blockchain as an example, you would want to generate an m-of-n multi-signature address. First, have each of your key persons generate a private key in a secure way. Then, gather the n corresponding public keys and use them to generate a multi-sig address. Several pieces of software are available to make this process more user-friendly. Transactions outbound from that address will require signatures from m of the n pre-set participants in order to be valid.
Ethereum, on the other hand, does not have native multi-signature transaction support. However, several multi-sig smart contracts have been developed, the most popular and arguably most thoroughly audited of which is Gnosis Safe. The multisig wallet creation process involves using their interface to deploy an instance of the Safe contract, then configure the m-of-n requirements as well as additional smart contract settings. Then, to spend the funds, a specially crafted transaction, signed by m of the n participants, is presented to the smart contract which authorizes the withdrawal. Because this solution is contract-based it's very flexible; its parameters can easily be updated in the future to add or remove participants or change other settings.
That covers the top two most popular blockchains. Other blockchains have their own ways of handling multi-signature wallets, but a common theme is this m-of-n scheme.
And to answer your two questions specifically:
To keep these keys secure in the long run, implement a policy by which the keys can be rotated if a multisig holder leaves the company, or if there's any chance that one of the keys has been compromised. With Gnosis Safe, this is as simple as using the UI to create and authorize a smart contract call that invalidates an old private key and adds a new one. With native Bitcoin multi-sig, you would need to generate a new multi-sig address and move the funds over manually.
Dev and QA teams could inspect outgoing transactions either before they are signed, or in a block explorer such as Blockchain.com (for Bitcoin) or Etherscan (for Ethereum) after they are broadcasted to the blockchain.