1. For business or personal email, do not open email attachments unless you are expecting it and you trust the sender. This is one of the most common ways to distribute spyware or malicious code.
2. Do not click on links in email messages, unless you know what the link connects to and you trust the person who sent the email.
3. While surfing the web, do not respond to popup windows requesting that you click "here" for anything. Close the window by selecting the X in the upper right corner of the window. Do not respond to popups telling you that you need a new driver or special program, or software update.
4. Online business or banking should only be done using a secure browser connection. Look for the padlock in the lower right corner of your browser.
5. When hiring employees, conduct a comprehensive background check before making an offer.
6. Do not download software from any unknown web page. Be very careful if you decide to use freeware or shareware from a source on the web. Make sure you are using trusted sites for software updates for your operating system or business applications.
7. When disposing of old business computers, remove the hard disks and destroy them.
8. Train your employees to be helpful, but vigilant when someone calls for help and asks for information. Make sure they authenticate the caller before providing any sensitive information.

Kissel, Richard (2009) Small Business Information Security: The Fundamentals. U.S. Department of Commerce.