Currently I've...
Updated both WordPress sites to 3.8.
Updated all plugins to their current versions.
Changed the password for the login to the WordPress blog site and changed the emails contact back to me within the wp-users file in the blog sites DP file.
What I will do:
Change the password for the login to our main WordPress site.
Change the secret keys in the wp-config.php file for both sites to their own unique keys provided by the key generator.
Anything else?