Design The design contains the data, security and privacy model and any other decisions and their rationale that are difficult to change after implementation has begun.