Best Practices < Design patterns. BP: “We got a IPS-firewall! Prob solved!” DP: “We are applying Least Priv. and NSM! Still expect loss!”