There's a part I disagree with him on. From TFA:
"Thereâ(TM)s a reason its called and advanced persistent threat; we'll poke and poke and wait and wait until we get in."
No. It's called that because it sounds scarier than "got past my mediocre defenses".
If they did not have to burn a zero-day (or rappel through a skylight) to get in then it is plain-old "cracking". People just prefer to call it "APT" because no one can defend against an "APT attack".
If they could defend against it then it would be a regular-type-attack that was successfully defended against.
The rest of his advice is good enough.