In 1992 and revised in 2002, the OECD's Guidelines for the Security of Information Systems and Networks proposed the nine generally accepted principles: awareness, responsibility, response, ethics, democracy, risk assessment, security design and implementation, security management, and reassessment.
I 1992 og revideret i 2002 foreslog OECD's Guidelines for the Security of Information Systems and Networks de ni generelt accepterede principper: bevidsthed, ansvarlighed, reaktionssvar, etik, demokrati, risikovurdering, sikkerheds design og implementation, sikkerhedsadministration, and fornyet sikkerhedsvurdering.