Start here. This is the direct spoken answer to practice first.
Why this question matters
Encapsulation means an object controls how its state is observed and changed. Private fields are a mechanism; preserving the object's rules is the purpose.
Encapsulation means the Order controls access to its state so callers cannot bypass its rules. I would avoid public setters for state that has business rules. The Order can expose read-only state and methods such as AddItem, Confirm, or Cancel that validate the current state and either complete a valid transition or return a clear failure. Construction should also create a valid Order, so callers cannot bypass rules through an incomplete object initializer.