which three items are cisco best-practice recommendation

Which three items are Cisco best-practice recommendations for securing a network?