Security is far from simple, but it needs to be addressed.  This article provides a straightforward solid overview of the bare minimum basics that need to be done to have the correct protections in place.  While security protection may be a continuous uphill battle, this is one area where you do not want to cut corners.  All you need is one oversight and the wrong person to find it.  It is that easy.