In my eager attempt yesterday to post my findings on SQL Server 2008 great new security features (read more here) I neglected to provide some valuable security information I have accumulated over the last couple of years for the other editions of SQL Server.
Here is my list of resources I turn to when working on securing SQL Server for a customer:
Finally to check my work, I've always turned to the Best practice analyzers