Security Policy in ecommerece website

I am doing a ecommerce website. It is my assignment. I have to write a Security Policy for it.

Does anyone can provide me with any helpful information for me to do this paper.

Thank you for your attention.

Best Regards

Stella

are we talking never disclose passwords, require passwords taht are alphanumeric mixed, forced password changes etc?

If so look at the banking sites for some class examples of too much security! But seriously bank web sites are great for that kind of thing.