Rick Byham, our wonderful technical writer, just posted some checklists you may find useful on the TechNet Wiki. You can search the wiki for word checklist or use these links:
Database Engine Security Checklist: Encrypting Sensitive DataDatabase Engine Security Checklist: Enhancing the Security of Database Engine ConnectionsDatabase Engine Security Checklist: Limiting Access to DataDatabase Engine Security Checklist: Database Engine Security Configuration
It's a wiki, so feel free to correct, comment, etc. Hope this becomes a good resource for the collective knowledge out there on these topics. Thanks Rick!
Go TechNet Wiki Go!