Secure by Design
Define security controls
Set up security controls or use current services and patterns.
Threat modelling
Understand how capabilities might be attacked or fail.
Socio-technical risk assessment
Consider risks, including human error, social engineering, and the impact of organisational culture on security.
Creating system and security requirements
Define your system and security requirements.
Secure Systems Engineering (SSE)
A systems-engineering based approach to security.
Control selection
Procedural, physical, or technical measures to avoid, detect, counteract or minimise security risks.