The Framework lays the foundations for strategic decisions, the creation of risk centred activities, and a design and de velopment model that defines the most adequate security measures for the en tire life cycle of applications, processes and services (cyber security by design).