Promote staff awareness; use firewalls; install anti-virus protection, disable unnecessary functions & services on devices/software automatically set to the manufacturer’s default, use two factor authentication, restrict administrative privileges so only those that need access to certain files/data have access, switch off Wi-Fi if not using it, don’t use free or unsecure Wi-Fi and password protect your devices and accounts.