Process that helps design and implement software that protects the data and resources involved in that software