Not installing operating system updates, not keeping anti-malware up to date, not locking doors to computer rooms, not logging off or locking computers, leaving printouts on desk, writing passwords down on sticky notes, sharing passwords, losing memory sticks with mobile devices, not applying wireless network security, not encrypting data.