Twitter Personality @SwiftOnSecurity has a guide https://decentsecurity.com/ that is reasonable for non-techies to understand and follow.