Apache itself won't need to be secured (aside from normal updates) but you'll have to secure the windows box... set it up behind a firewall and allow only apache's port