To provide a common understanding of what is needed and expected in information technology security programs, NIST developed and published Generally Accepted Principles and Practices for Securing Information Technology Systems (Special Pub 800-14) in September 1996.
The Generally Accepted Principles and Practices for Securing Information Technology Systems were published by the NIST in 1996.
No common understanding of what is needed and expected in information technology security programs has been established.