Some of the links are bad but this is a great list of things to keep in mind when seeing where your work is with regards to security.