Phase 3 – secure by design