Simple things like disabling Office macros, setting up screen saver passwords and adding multifactor authentication and ...