CISA says basic cyber hygiene includes strong passwords, software updates, thinking before clicking suspicious links, and multi-factor authentication. Its guidance also emphasizes backups using multiple copies stored on different media and off-site, including the cloud.
https://www.cisa.gov/topics/cybersecurity-best-practices