Drupal Best Practices

The Drupal documentation is quite extensive and includes an entire manual called, Best Practices. This manual has sections covering: 

• Accounts and roles
• Configuring Apache and PHP for Drupal in a Shared Environment
• File and directory management
• Use test sites
• Version update considerations
• Do not hack core
• Security
• Configuration steps for a more secure site