Though it's not been updated in a while, Kentico wrote a white paper that addresses this and other security measures. I would take a read through this first.
http://www.kentico.com/downloads/Kentico-CMS_Security-White-Paper.pdf
They have some built in measures they use and suggested tips to protect the system.