- Use passphrases, not passwords.
- Patching is vital and most important.
- Every firewall rule should tie back to a process and rules rarely turn out well - monitor the log-ins.
- Wi-Fi needs to be segmented and considered an untrusted communication channel.