Appendix II lists the principles identified in NIST's Generally Accepted Principles and Practices for Securing Information Technology Systems, September 1996.
To find NIST's Generally Accepted Principles and Practices for Securing Information Technology Systems, reference to Appendix II.