A smart contract is code that runs on a blockchain and is hard to change once deployed — so mistakes can be costly.
The fundamentals
Fundamentals: least privilege, well-reviewed libraries, thorough edge-case testing, multi-signature control for sensitive operations, and events for monitoring.
After deployment
After deployment, transaction monitoring and an incident response plan are part of security, not separate from it.