Appendix II lists the principles identified in NIST 's Generally Accepted Principles and Practices for Securing Information Technology Systems , September 1996 .
To find NIST 's Generally Accepted Principles and Practices for Securing Information Technology Systems , reference to Appendix II .