Hi,
I can understand what you are going through and most people today are facing this dilemma. Nonetheless, First things first.
Check the following links:
http://csrc.nist.gov/isptg/pdf/
This is the best place to get documentation for having security policies in place. An excellent guideline from NIST.
http://http://nsa1.www.conxion.com/
You will get all the OS/web server/router hardening guides out here.
http://www.insecure.org
http://www.sans.org
http://www.cert.org
These are the places which will have all the information related to the latest exploits and attack scripts used by attackers to launch attacks on various sites. All the three sites have excellent best practice documents that will help you get going fast.
http://www.securityfocus.com
This web site will help you get latest information on the state of the Internet, latest of the hacks, latest vulnerabilities in products, protocols
http://www.incident.org
http://ww.dshield.org
These will help you get an idea about the world's active attacks, and even offer help to fight back.
Important things to do:
a). Setup a security policy
b). Ensure that there is an incident handling clause in it that will help you take care of any eventualities.
c). Atleast a well configured firewall
............ the list is pretty long
I cannot continue like this. So publish your mail ID and let me know that you need help. Then let me see how I can help you.
Thanks,
Rookie