When ensuring security and compliance with all requirements, a comprehensive approach was used that incorporates the learnings and experience from the heavily-used e-government infrastructure service.