NIST generally publishes excellent guidelines on operational security for academics, and commercial firms.

As a "solo" anything you are going to fail sooner or later. At minimum one requires a gray-beard IT person/consultant with a vested interest in your survival, legal consultant in corporate contract/employment laws, legal consultant in Intellectual Property (Copyright/Trademarks/Patents), a commercial Accountant familiar with tax laws, and a customs broker to handle international shipping rules.

No one is an "expert" all the time, but without key people a small firm will get squashed pretty quickly. =3