Please see my recent article on best practices for cyber security