Creating a secure system secure before putting into service divide a system into small simple parts be aware of trust chains