How do you do a security audit on your site?
JimEngland: A simple first step would be to talk to a security expert locally in your area.  In my area (Cleveland, OH) there is a group that will test your security for free and give you pointers on what to change.