Appendix II lists the principles identified in NIST 's Generally Accepted Principles and Practices for Securing Information Technology Systems , September 1996 .
Appendix II does not list information or principles related to NIST .