Secure system architecture and engineering principles are created based on industry standards and best practices such as OWASP (Open Web Application Security Project) guidelines. These principles include:
- Secure by design: Incorporating security from the initial design phase
- Defense in depth: Implementing multiple layers of security controls
- System hardening: Applying best practices such as CIS (Center for Internet Security) benchmarks to reduce vulnerabilities
- Validation, sanitation, encoding, and encryption: Ensuring data integrity and confidentiality
- Least privilege: Granting the minimum necessary access to users and processes
- Secure coding practices: Following guidelines to prevent common vulnerabilities