No matter how diligent you are at preventing vulnerabilities and securing your environment, it's impossible to be completely secure on the Internet. What you can do is plan for how to limit the damage that people can do when they manage to compromise some part of your system. This line of thinking is called "Defense in depth" -- you can't just apply security updates and call it good.
Security
Secure the environment
It amazes me that still in 2011, the standard way web designers upload code to a server is FTP ("File transfer protocol"), a protocol that is completely insecure, easy to snoop, slow, hard to use, and often problematic through firewalls. There are many better ways.
A question of risk
How would losing your web site affect your business?
That might seem like a silly question, but a surprising number of small organizations don't think it can happen to them. Think again -- web sites get lost all the time, through a variety of means. The server hosting your site might have a hardware failure. Your site might get hacked. Your web developer might accidentally delete something critical. Your host might go out of business, leaving you stranded. If you're in the tech world, you hear about these incidents all the time.
Why cheap web hosting is expensive
Just the other day I got a request for proposal for hosting, complete with a statement that they knew of some hosting that would cost $15/month. The implication being that they were looking for a hosting proposal that would not exceed that amount.
Running Windows is more risky than ever
The Register is running a story today about a botnet--a network of compromised computers--that is under the control of hackers. Is your computer one of the bots? For a surprising number of people, the answer could be yes.