Ask HN: How to communicate basic security protocols to parents, non-techs

I've been writing an email to my family (mostly 65+ parents, retired, etc.) about how to protect themselves from email scams, etc., especially in light of the heartbleed fiasco.

There's often no distinction between a systemic bug (e.g. heartbleed) and an actual corporate security breach (e.g. Target). Everything is a "hack" to them. I'm not looking for "general" advice, e.g. make sure you're using https, etc. And I'm afraid this will devolve into "any non-technical user", no matter what the age. If so, that's fine.

Here's what I'm asking...How do you communicate this stuff to your non-tech people, whether parents, grand-parents, colleagues, etc.? Without being overcome with technical descriptions. How do we help them stay safe? Everything from social engineering (a la Kevin Mitnick) to clicking on emails from their "bank."

Is there a protocol, or set of "rules" you place on your loved-ones? The last thing you want is for them to call you at 2am asking for help because they've been "hacked." What strategies are you using to prevent the "2am call because they've been hacked?"