Security Think Tank: Web security guidelines from FS-ISAC

What are the main web security challenges for organisations and how are they best addressed?