Web security

What factors should be considered when choosing web security measures for a site?