The framework sets down the basis for strategic decisions and design activities from a risk-based focus using a design and development model that defines the appropriate security measures throughout the entire life cycle of applications, processes and services (“cybersecurity by design”).