Blocking of suspicious websites, security policies that address attachments and downloads, limited user privileges --- All of these help alleviate the threat of malware.