What BBPs do you implement?

What best business practices do you incorporate to protect your network/personal information?

Conficker is on the radar. People are updating protection services and some are completely disconnecting from the network until April 1, 2009 passes.

Implement best business practices for your own network, your data, and mention in your letter of intent about how to handle your hardware, software, and network data once you pass on.

So what best business practices do you incorporate to protect your network?

One of the diary entries from the SANS Internet Storm Center under the title of, "Feeling Conflicted about Conficker?" states, "As always, we want to remind our readers that if you are doing what everybody considers to be best business practices (firewalls, unneeded services turned off, systems patched, current antivirus software, user education and awareness, good policies, an incident detection and response mechanism, etc.) then you have very little to worry about. If you detect anything new with respect to Conficker over the next 24 hours please let us know via our contact page. We'll sound the alarm should something bad happen. Otherwise, back to work and Happy April Fool's Day!!" (2009, Sachs)

If you have everything set up, automatic downloads, pre-scheduled scans, backups, take the time and check your own system and improve your own user awareness. If your BBPs are in place, take the time to share your knowledge with someone who is not implementing any safety practices for their network, personal or professional. Don't wait on anniversary of a virus or botnet attack to check your system, take care of your data on a regular basis. As with most things in life that we consider valuable, preventative maintenance is always more affordable than reactive maintenance.

As always, comments and recommendations are welcome.
Share your best business practices!