I know that I am just repeating myself - but during the ITPro/Partner Roadshow, I have been asked whether there is an easy way to get a quick assessment of a company's state regarding security. Yes, there is a really easy way: It is called Microsoft Security Risk Self-Assessment Tool (cool, isn't it?) and can be downloaded for free at http://www.securityguidance.com/
Roger
Thanks for the link.