First of all, a company should establish policies that require strong passwords. it is also necessary to establish policies requiring periodic updates.
Another strong security measure is to set up a firewall that helps to control data traffic, both incoming and outgoing.
Antiviruses are necessary. Private users need them as well as businesses.