[alex_anglin]

The Critical Security Controls [1] are a good place to start. Alas, it's neither free or necessarily straightforward to implement them - which is why breaches persist.

[1] https://www.cisecurity.org/controls/cis-controls-list/