Investigate the security practices of any business partners who have connections into your network.
Close down all unnecessary holes in your firewall.
Filter outbound traffic on your firewall.
Patch everything.
Start thinking about attack-surface reduction on your hosts .