The Center for Internet
Security publishes tools to measure security
settings. Recommendations are a community consensus. Again, for
IS/IT professionals.
Finally, if you have a IST/IT support organization -- take advantage
of them. They are the most valuable resource you have (even though
they may not be perfect).