Safely install mysql on windows server 2008
A lot of standard stuff applies.
Make sure that there are no open ports from the Internet (via hardware or software firewall, preferable hardware). Make sure that MySQL is running under an account which has the least permissions possible. Fast storage for the database and transaction logs
I'm sure there's lots of others that people can suggest.