C(I)SO - And Now What?: How to Successfully Build Security by Design