I am planning to start a new web site on asp.net mvc 2 (3). 
Have anybody a *full* (if possible) **check list** of actions, approaches I should reach to avoid *almost* problems with security.