General Principle

1. "It depends": solution for system security depends on context and budget.
2. Separation of concerns: keep it mind when designing systems, for changeability and security.
3. Reserve strongest controls for the most valuable pieces.
4. LOG EVERYTHING.