Principle XXI
Protect What Matters
Discernment about what deserves preservation, what should change, and where long-term value actually lives.
Explore the 42 Principles by topic
Security, Privacy & Risk
Security by design, privacy, identity, least privilege, layered defense, dependencies, resilience, conscious risk acceptance, and protecting people rather than merely passing controls.
Security in the 42 Principles is treated as a design responsibility, not a final checklist. The safest systems begin by asking what matters, who should have access, what can fail, and what consequences failure would create.
Risk is broader than attack. Dependencies, concentration, complexity, recovery, secrets, identity, privacy, and operational choices all shape how much exposure a system carries.
The ethical center is people. Security and privacy matter because systems hold someone else's time, identity, work, money, trust, or personal information.
Concepts covered
Ideas that appear across the book
- security by design
- privacy
- least privilege
- identity
- layered defense
- secret management
- dependency risk
- risk acceptance
- recovery
- human consequences of security decisions
Relevant Principles
Read each Principle as its own essay.
Each Principle has a dedicated page for focused reading and search, with a link back to its location in the complete book.
Principle XXIII
Design for Failure
Resilience, graceful failure, recovery, preparation, visibility, and accepting failure as a design constraint.
Principle XXV
Every Dependency Has a Price
Capability, coupling, concentration risk, external reliance, and understanding what every dependency can cost.
Principle XXVII
Security Begins in Design
Security, privacy, identity, least privilege, layered defense, and protecting people as a design responsibility.
Questions this topic explores
Start with a real question.
- How do I design security in from the beginning?
- What should least privilege look like in practice?
- How do dependencies change security risk?
- How should I think about privacy as an engineering responsibility?
- When is accepting a risk reasonable?
Related topics
Follow the idea across disciplines.
These topic guides share Principles with Security & Risk.
Systems Thinking & Complexity
Dependencies, second-order effects, complexity, bottlenecks, unintended consequences, feedback, tradeoffs, and understanding how parts interact as a whole.
Explore Systems Thinking →Judgment, Priorities & Decision Making
Tradeoffs, priorities, reversibility, scope, opportunity cost, evidence, uncertainty, measurement, and making responsible decisions without waiting for perfect knowledge.
Explore Decision Making →Resilience, Failure & Recovery
Failure preparation, recovery, reliability, graceful degradation, learning from adversity, reducing panic, and designing systems and people to recover when things go wrong.
Explore Resilience →Stewardship, Purpose & Legacy
Contribution, purpose, succession, service, institutional memory, gratitude, responsibility for what we inherit, and leaving people and systems better than we found them.
Explore Purpose & Legacy →