Keeping a website safe from hackers

Website defacement may come in a variety of forms. As a security professional, what are some of the major concerns with how websites may be defaced? What would be some recommendations for keeping a website safe from hackers?