According to bruce schneier, the security mindset involves thinking about how things can be made to:

This kind of thinking is not natural for most people. It's not natural for engineers. Good engineering involves thinking about how things can be made to work; the security mindset involves thinking about how things can be made to fail. It involves thinking like an attacker, an adversary or a criminal.

Hope this helped if not comment