Here is what we use:


http://iase.disa.mil/stigs/stig/

and

http://csrc.nist.gov/pcig/index.html


Enjoy. The sites are obfuscated, but contain some decent material and guidelines.

As for personal tips ect, I really can't help you as in my long years of gov't contracting the lines have blurred for what is 'classified'. So, my best advice is, if you can access it via those links, you can know about it.

Feel free to shoot me any questions you may have based upon material you find on those two sites.