The Australian Defense Signals Directorate maintains a list of the Top 35 Mitigation Strategies against targeted intrusions. This is just a reference to the top strategies:
Patch Applications
Patch the Operating System
Minimize the use of local admin
Application whitelisting
...
not tagged.