What are the best practises for developing a secure asp.net website.?

[ieswk T]

Site should be secure enough to safely allow online payment processing.