Universal Access is designed to give citizens access to their most sensitive personal data via the the Internet. Security must be a primary concern when developing citizen account customisations. All projects built on Universal Access must have highly focused on delivering security. This requires the project team to think of security from the very beginning rather just testing it at the end. It is recommended that all projects take at least the following steps to ensure the security of their delivery: The remainder of this chapter discusses the Universal Access Security Model and provides the reader with information on how to add customizations that work with rather than against this Security Model.