Design Principles for Engineering Information Security in Single-Windows