20 Critical Security Controls

I have wanted to share this for a while;

http://www.sans.org/critical-security-controls/guidelines.php

SANS does an excellent job of listing quick points to each control to help enable you to sell this and start to implement.  This information is great for any organization small or large, you can pull great information from this to make your life better.  Also a bit more fun with Control 17

The largest issue I am sure you will have is finding the time to go through the entire document.  It might also be worth to distill this a little further and get down to a few key wins in things you know you are lacking right now.