Lesson 5 of 8

Security principles: least privilege, a separate production environment, keys and secrets, and vendor access

Security in a lending system is decided less by tools than by a few principles applied without exception. This lesson sets out who governs security, and five principles a project lead can ask about: least privilege, keeping production apart, protecting keys and secrets, controlling vendor access, and being ready to respond to an incident.

Published 2 November 2026