Developing architectures that compartmentalise systems into zones and conduits and identifying security controls required to provide adequate protection.