I'll tell you this for free.
1) Update your Windows to latest version
2) Get Paid antivirus like ESET
3) Have brain
And that should cover it about all...
Many institutions like NHS can't afford to update all of their systems, also there are many devices that can't be upgraded like medical equipment