To provide a common understanding of what is needed and expected in information technology security programs, NIST developed and published Generally Accepted Principles and Practices for Securing Information Technology Systems (Special Pub 800-14) in September 1996.
The Generally Accepted Principles and Practices for Securing Information Technology Systems were published by the NIST in 1996.