Implement security functions as largely independent modules that maximize internal cohesiveness within modules and minimize coupling between modules.