Best practices guide for security

[Ron Watkins]

Im looking for a best practices guide for security implementation of
Postgres. Would like to see both internal (role/grant/other) and external
(encryption, backups).

Any pointers to implementation guides/examples would be appreciated.

Ron