They all largely say the same things: avoid known vulnerabilities, don’t have insecure defaults, make your systems patchable, and so on.

So basically, do all the things you’re not doing but know you should.

source: SOS