Replace default passwords on your router, cameras and other connected devices with strong, unique passwords. Change the default username too if the settings allow it.

An external drive you unplug after every backup, or a cloud service that keeps old versions. And most importantly, try restoring one file today. A backup you've never tested isn't a backup.

Turn on automatic updates for your system, your browser and your phone. The 'Remind me later' button is the risk, not the update.

In File Explorer, go to View and turn on 'File name extensions'. After that, one glance tells you what you're opening.

Enable two-factor authentication with an authenticator app and keep recovery codes somewhere safe. Start with your email, then your other important accounts.

Before any link asking for money or login details, call the sender and confirm by voice. And urgency written into the message — 'within the hour', 'your account will be closed' — is a warning sign in itself.

At home: Don't leave your backup drive plugged in all the time. Copy to it, then unplug it.

At work: Don't put cameras and door-access systems on the same network as staff. And ask one question — if our network went down right now, how would we get into the building and how would we talk to each other? If the answer is 'through that same network', the plan is incomplete.