I wanted to draw your wandering attention to the wonderful (aka free) tool called the Microsoft Security Assesment Tool (MSAT).  It basically walks you through a questionnaire that will result in and assess your business's general level of risk from a security perspective - in over 60 detailed categories! :-)  Definitely well worth a look.

You can get it here...  http://microsoftsecurityassessment.com/