The first step to having a good, secure Web site is choosing the right Web server. The type of Web server you choose will depend on an evaluation of criteria such as cost, the sensitivity of your data, the platform being used, who will need to access the data, and the security options you will require from the server system.

In choosing a Web server, remember this important point: Choosing a Web server that's right for your organization is subjective. What may be an excellent choice for one enterprise may not work as well in your company. You may find that your company doesn't require certain features; a particular Web server won't run on the operating system being used; or the price of a server is out of your price range. Determining what comparable companies and networks are using can be valuable in your decision-making; however, in the end, you will find that the server you choose will be an independent and individualized decision.

You should take time to identify what could be accessed through your Web server and identify what data is sensitive and must be protected. For example, you may want all users to access a default Web page that introduces your site and allow them to view products for sale by your company, but you wouldn't want them accessing a database of users or credit card numbers. You may want to allow users to access all content on the Web server itself, but...