Do not open files of unknown origin, and in terms of web access, respect browser alerts regarding potentially malicious websites. It is also very important to make copies of content that is not regularly backed up by the organisation. Relevant information must be stored on the organisation's server (which has backups) and not on individual workstations (which do not have backups). Finally, never share authentication data (passwords).