Security fixes aren’t enough

In this weeks’ Security Solutions column, Michael Mullins says security patches are useless without properly securing your system before it?s on the network. Should companies develop a standard security configuration guide to be used before deploying servers? What other security settings do you think should be configured before deployment?