3 ms·

I would add: disable root logins, create exactly one account that can login, require a password for sudo