Security Think Tank: Web security down to good risk management

What are the main web security challenges for organisations and how are they best addressed?