Create 'Security principle - secure by design' principle

[RajuVora]

Our engineering principles are the high-level direction we want to encourage engineers to follow or consider when they are making decisions and implementing things. Look at the 'writing a principle' standard and provide some brief information below

What is the principle you are suggesting?
Secure by design

What would be the benefit to the Home Office of adopting this principle?
Designing systems with security in mind is more effective, quicker and cheaper than trying to 'bolt it on' at the end of a development lifecycle. Shift consideration of security 'left' so that it informs work as early as possible, and so that security processes are baked into the ongoing support of the service.

How might people follow it
What kinds of things would we be trying to encourage by following this principle

Additional information
Add any other information you think would be useful here

Please confirm the below

• [x ] I have looked at the writing-a-principle standard and think this would meet the standard
• [x ] I have looked through our existing principles and think this is not covered elsewhere
• [x ] I have checked through the open issues on the repository and this principle has not already been suggested