IIS 6.2 (Build 9200), Windows Server 2012 R2 - Security steps

Hello everyone,

We would like to host ASP .Net, framework 4.5 website on IIS 6.2 (Build 9200), Windows Server 2012 R2.

We do not have much knolewdge about IIS security. Can anybody share what all (basic + advance) security steps we need to consider while hosting the website on our internal server?

Any help would be much appreciated.