The Microsoft Security Assessment Tool is a questionnaire used to audit the security of your environment. It identifies areas where security is tight and areas that need improvement. It’s a great tool targeted at SME’s that are too small to employ a full time security administrator but want to have some confidence they are taking some precautions. At the very least it’s a great framework to identify potential security issues that you may not have thought of.
The tool is quite generic for the most part although it does cover off Microsoft technologies in more detail than other technologies.
After filling out the questionnaire a report is generated giving you a rating in different security areas. It also generates a priority task list that you can work through to make your environment more secure.
The tool can be downloaded from http://technet.microsoft.com/en-us/security/cc185712. You should be aware that the tool does install a copy of Microsoft SQL Server Compact Edition to store the backend information for the application.