See https://www.youtube.com/watch?v=jq_LZ1RFPfU
- Defense in Depth: e.g. MFA -> VPN -> Password
- Least Privilege: only give required privilege
- Seperation of Duties: one thing can be done via two or more actors
- Secure by Design: make security from start to end
- KISS: the complexity of security system will make it unsecure
- NOT Security by Obscurity: Kerckhoffs’s principle e.g. AES and RSA encrypting algorithms
Summary: greate for making security desisions