Security best practices for 2022