Here is a nifty (and Web 2.0!!) post about what you should do when deploying an ASP.NET application into production.

Considering what I'm going through at the moment to secure an Internet banking web site, there's some nifty time-savers in here. Of course, this isn't the whole story. I'll be posting some of the details of my exploits as soon as I can be bothered.