Here is an excellent checklist that is available on the web: http://www.learnasp.com/iishelp/iis/htm/core/iisckl.htm
Here is one written by Microsoft: http://www.microsoft.com/technet/security/iis5chk.asp
Here are some good books about IIS: http://www.digitalguru.com/dgstore/product.asp?sku=0072123281&dept%5Fid=286&ac%5Fid=73&accountnumber=&couponnumber=
http://www.amazon.com/exec/obidos/ASIN/0672319640/
http://www.amazon.com/exec/obidos/ASIN/1576106748/
This was first published in July 2001