Security Think Tank: Approaches to effective web security

What are the main web security challenges for organisations and how are they best addressed?