Yes - keep three copies of the backups just in case. Keep your software up to date with security-related changes. For example, without the latest version of your browser or email program, you may find that when you go to read email - even before you open up any of the messages, your system ha been taken over by a remote attacker. Turn off unnecessary Internet service ports. In general, if you don't know why your system uses a service, you should not have that service turned on.
Every service is a potential vulnerability.
Use a scanning tool to test which ports are turned on. Never trust the menu-based configuration tool to tell you this sort of information because many of these tools have errors, some of which have opened systems up to remote exploitation even though the user 'did the right thing'. If it's really important to document, print it out. Remember that paper trails are a lot easier to use and authenticate in court than electronic media. Passwords have been a security issue for a long time, and most people still don't know how to use them safely.