The value of the security-by-design principle and how early measures can save costs in the long term. How to implement it?