Most of today’s security risk in the average computing environment comes from “drive-by downloads” Don’t let end-users have access to elevated Administrator or root accounts that allow software installs. Whitelisting software is available in Windows 7 (AppLocker) and from vendors such as Bit9, SignaCert, and McAfee. The shortest distance between professional malware and your company’s data is an unpatched Web browser. If you want the best computer defense your precious dollar can buy, focus on fixing that one problem.”]
Source: https://www.csoonline.com/article/2630599/the-one-essential-truth-of-computer-security.html