[Hampshire] Server Security

I am helping a friend set up an ubuntu server for his business. However
I am very concerned about security and am worried about inadvertently
introducing security holes.

Is there a good book or any recommended websites/tutorials that I could
read. Something like "10 things you must always do" and "10 of the
biggest mistakes to avoid" would be excellent.

Thanks

Roger