What five or six things would you recommend the average non-tech specialist, busy, cash-strapped small business do to improve its security? Rough order of importance.
Boosts appreciated!

@Darrenpauli

1. Run accounts on paper and use chequebooks