Secure by design principles