Another suggestion is more of a basic security one than a web suggestion. Never go more than two months without changing your passwords . While this might be a little annoying at first, it will make your business more secure over the long run. As well as each two-month change, if an employee who had password information leaves, change them. Better to be safe than sorry.
Security is sometimes an afterthought.
It's a subject which focuses on the negative side of people's behaviour. By day he writes software, and by night he weaves words. Find out what kind of security precautions the company who hosts your web site has. Feel free to write me with questions. Hopefully these security hole discoveries will serve to wake people up before it is too late.