Configuring WWW and FTP Securely:

Roundup

Damon Hart-Davis, ExNet

Legal and business penalties of not protecting your systems.
Consider using a third-party supplier/specialist.
Check sources that will be run with priviledges.