• Verify explicitly
  • Least privilege access
  • Assume breach