Q: Safest' secure way to configure a Mac?

Whats the best way to secure/configure a Mac "without installing any additional security software" (Yes Mac's don't need it so no need to explain) using inbuilt features of El Capitan. A simple step by step guide would be helpful to all readers. e.g.. Account settings, firewall, gate keeper and other measures ?