There are a multitude of posts out there about online security, which range from scaremongering to thinly veiled disguised blog posts adorned with affiliate links.
Well I came across a really good resource that's worth a read, and there's no point regurgitating it, so follow the below link if you want some no nonsense and practical ideas to protect both you and your business.
The Motherboard Guide to Not Getting Hacked
Let me know what you think, or shout if you have any questions.