The only system that is completely secure is one that is not connected to any network! We need to build security into the architecture from day one. Sensitive information, such as customer names and addresses, must be encrypted at test. Data also should be encrypted in transit—which means HTTPS (and not HTTP) communication for APIs and encryption of messages for message-based communication. Authentication must be enabled for sensitive resources. These and other security-related details are covered in Chapter 8, Modeling Data.