CISSP - Security in the software development life cycle - Secure Design Principles