Best security tweakings on a Mac?

Aside of installing NIS and using a standard account, are there any simple changes from the default install that could enhance security?