1. Abandon antivirus
Businesses could remove host-based security from their desktops and trust that their perimeter will keep out the malware.
via Time To Dump Antivirus As Endpoint Protection? — Dark Reading.
There are some other useful tips in this article as well. I like the above quoted idea because AV software can be a pretty heavy load on an endpoint requiring constant maintenance and upgrade. These upgrade cycles in and of themselves pose a security hazard. The more complex a system becomes, the more that can go wrong.