SANS security recommendations.

SANS is not always the best set of recommendations, but they have at least one foot firmly on solid ground.