1. Train employees in security principles
2. Protect information, computers, and networks from cyber attacks
3. Provide firewall security for your Internet connection
4. Create a mobile device action plan
5. Make backup copies of important business data and information
6. Control physical access to your computers and create user accounts for each employee