- Update. Update. Update. Make sure that you’re running up to date software. Old software makes it easy for bad guys to compromise you by using widely available exploits.
- Control access. Make sure you know who has access to your servers, and that only those people are accessing your servers.
- Test apps. If you’re running custom application code on your servers, make sure you’ve had it tested for the Top 10 security issues in web applications.
- Be watchful. Keep a close eye on your server and the bill from your cloud provider. An unexpected spike in traffic will help alert you that your simple webserver has been turned into a costly spam zombie.