These are simple, but very important and effective points. I used to get a log of attempted logins, and boy - it was really surprising.