Right now we have our administrative features located at www.mysite.com/admin.  It is locked down by UN/PW but it still seems like an insecure place to have it.  Is there a better place to put it?  Perhaps at another domain?
Where to put Administrative Features
architecture
Ensure that the area of a website is secure by having:long passwords,or a good security audit with the maximum number of failed login attempts before lock,or a two-step verification,or anything else which actually increases the security level,no by:moving the area somewhere else,never documenting it, hoping that nobody will find it,or any other it's hidden, so it's secure technique.