Security Assesment Tool
I wanted to draw your wandering attention to the wonderful (aka free) tool called the Microsoft Security Assesment Tool (MSAT). It basically walks you through a questionnaire that will result in and assess your business's general level of risk from a security perspective - in over 60 detailed categories! :-) Definitely well worth a look.
You can get it here... http://microsoftsecurityassessment.com/