It is my firm belief that any server needs to be properly secured. But how do you check to see if you have done all of the right things? You shouldn't just hope that you have done everything, instead you need to be proactive. First of all, get the
Microsoft Baseline Security Analyzer (MBSA). Running this is your first real sanity check. From there you need to make sure that you have a good firewall in place and someone managing that firewall that knows how that firewall works. A firewall is no good if it is not properly managed and kept up to date. Now, there are probably a lot of other things that you can and should do, but I'm not going to go into those in depth right now. The bottom line is that if you are not 100% confident in what you have, ask for help. There are a lot of companies that are willing to help you properly secure your network and all you have to do is give them a call. Some of them will even help you properly plan your network without charging a dime as they just want you to buy their hardware and/or software. Do your research though, don't just go with someone because they cost the least. Remember the old adage, you get what you pay for. Security is not one of those things you should skimp on. Having a secure network is like having Johnnie Cochran on retainer.