Appendix II lists the principles identified in NIST 's Generally Accepted Principles and Practices for Securing Information Technology Systems , September 1996 .
Appendix II contains other information that is not from NIST .