The Principles
Understand what you are trying to protect
Understand the threat(s) you are trying to
protect against
Also, costs and risks
Be prepared to establish trust by telling
people how you do it
Assume that the bad guys are at least as
clever as you are!