Creating a secure system centralisation is good centralisation is evil be aware of snowballing effects physical security is full access too much security means more insecurity security is always a trade-off