NIST has developed a report on minimum security requirements for federal information systems. This planning study might be valuable for companies to look at for ways and priorities associated with strengthening their security during the coming year.
NIST: Minimum Security Requirements for Federal Information Systems