Best Practices - Even Dilbert know what they mean

You can see it here.So what are the quick wins you can do on security to go beyond best practices? Feedback would be nice.