How to set up security on a new MacBook

I followed Justin's advice about Intego.
https://www.experts-exchange.com/posts/245/I-know-I've-said-and-written-about-it-a-billion-times-but.html

I also use a VPN, Avast's SecureLine.  This is one VPN that's been very reliable and the internet speed is still very fast while other VPNs slow it down.

AV is reactionary.  Even with AV watching, some files will get encrypted and you still need disconnected or offline backups.  Since the OS is much tougher to hack than it used to be, the main line of defense is the user.  If the user is going to just click OK on every link, then there's no stopping any new attacks, even with AV and adblock.  You need offline backups.

Thanks so much for all the excellent advice everyone! I will be setting up security measures on my Mac this week.