Most security advice is a long list with no priorities. Here are the few habits that do most of the work, a schedule for the rest, and the rules you can safely stop following.