MSAT for Midsize Business IT Pro Security
The Microsoft Security Assessment Tool (MSAT) is designed to help organizations with fewer than 1,000 employees assess weaknesses in their current IT security environment. It will help identify processes, resources, and technologies that are designed to promote good security planning and risk mitigation practices within your organization.
Oh, and it is free :-) There are links to partners is you discover you will need outside help to address issues you discover.
