Do not open files of unknown origin, and when accessing the web, respect browser warnings regarding potentially malicious websites. It is also very important to make copies of content that is not regularly backed up by the organization. Relevant information must be stored on the organization's server (which has backups) and not on individual workstations (which do not have backups). Finally, never share authentication data (passwords).