3.1 Describe the term security by design

"Security by design" is like building a superhero's fortress with the idea that it needs to be indestructible from the moment you lay the first brick. You wouldn't wait for a villain to break in before deciding it should have walls that can withstand laser beams. Instead, you make sure that every part of the fortress, from the entrance to the secret underground labs, is designed to be secure from any threat.

Here's how it works:

Built-In Security: Imagine integrating invisible shields and self-repairing walls into the fortress as you build it. That's what security by design does for systems; it integrates security measures right from the start, making sure every component is as secure as possible.

Treating the Cause, Not Just Symptoms: Instead of just patching up holes after an attack, security by design aims to understand why those holes existed in the first place and designs the system to prevent them.

Continuous Process: Just like a superhero is always training and improving, security by design recognizes that security isn't a one-time task but a continuous effort to stay ahead of potential threats.

User-Friendly Security: The fortress doesn't require a superhero to have a PhD in fortress operations to be secure. Similarly, security by design ensures that users don't need to be tech wizards to keep their systems safe.

Adaptive and Evolving: Just as a superhero updates their tactics to deal with new villains, security by design involves continuously updating and evolving security measures to tackle the latest threats.

In essence, security by design is the principle of embedding security deeply and fundamentally into something, making it a foundational component rather than an afterthought. It's about foreseeing potential threats and building defenses against them into the very core of systems, just as a superhero would design their fortress to be a safe haven against any known and unknown threats.