3.13.2 – Employ architectural designs, software development techniques, and systems engineering principles that promote effective information security within organizational systems

This control requires organizations to build security into the foundation of their systems by using secure architecture, development practices, and engineering principles. It’s about designing security into the environment—not bolting it on afterward.
Read the full blog breakdown of 3.13.2