How to improve security for small business networks

I am looking for ways to improve security for a small business environment

What security measures do you consider essential for protecting business computers networks and important files

I am especially interested in malware protection endpoint security regular updates and network monitoring

What security tools or practices have worked well for you