General Guidelines for Secure Application and Infrastructure