How the NCSC thinks about security architecture –