Everything I know about Information Security I learned from https://xkcd.com

Identity and access Management

Password Management

SQL Injection attacks and sanitizing user inputs

You cannot be secure without physical security

Don't use untrusted networks

Perform backups before major updates

Honeypots

Improperly signed digital certificates

Risk analysis

Encryption

Duress and passwords