SQL Server Security

SQL Power Doc - Discover, document, and diagnose SQL Server instances and their underlying Windows OS & machine configurations
Fix the "High Priority" issues from Security Report, and remove unnecessary permissions
Base on the discovery of SQL Power Doc, formulate a security plan to fit the current environment
Keep this information to yourself, SQL Power Doc result will present more problems then a typical DBA can handle. You might be in a "dog house" for the duration of the position.
Example of SQL Power Doc Reports:

Survey Current Environment

Create a separate Domain Service Account for each server. In reality, in-house application will use same account over many servers
Remove Everyone User from data drives
Typically, I restrict access to production environment, and grant full access to development environment
Reduce or eliminate user permissions, "Taming the wild west mentality"
Encryption backups: https://www.youtube.com/watch?v=7YX0epk7r9s
How do you handle database security in your environment?
What server/database roles do you use the most?
How many people use Role Level Permission?