name: Secure-By-Default
description: A security design principle where systems and software are configured with the most secure settings from the initial deployment, requiring users to explicitly opt-in to less secure options rather than having to manually enable security features. It plays a critical role in protecting organizational assets and maintaining a strong security posture.
url: https://www.ncsc.gov.uk/collection/developers-collection/principles/produce-secure-by-default-systems
tags:
  - Best Practices
  - Design Principles
  - Security
  - Security Architecture
  - Software Design
created: '2025'
modified: '2025'
apis: []
common: []