Organizations should ensure that devices running Windows are fully patched and deployed in accordance with best practices. Additionally, organizations should have SMB ports (139, 445) blocked from all externally accessible hosts.

For more technical details and an understanding of how this attack works please read the Talos blog at https://blogs.cisco.com/security/talos/wannacry