Hey dynamc,
I find one of the essentials is just ensuring you only run what is required. Once you have the essential services running learn all you can about them. Once you have learned about the services you are running you will have no trouble minimizing security risks.