The Tenets of Security

Good security practices help to create good security implementations. Within the security community, there are a few tenets that come up time and again. Many or all of the implementation best practices can be traced back to these principles, which are explored in the next few sections. I have found that these tenets, when carefully followed, help to ensure effective security.

An important observation is that these tenets are proactive and persistent. They must be analyzed and discussed before any coding, and certainly before anything goes into production. They should also remain constant both in time and in applicability. They should apply to all applications, databases, and digital and nondigital processes.