NOTICE: Due to a lapse in annual appropriations, most of this website is not being updated. Learn more.

Form submissions will still be accepted but will not receive responses at this time. Sections of this site for programs using non-appropriated funds (such as NVLAP) or those that are excepted from the shutdown (such as CHIPS and NVD) will continue to be updated.

U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

PUBLICATIONS

Engineering Principles for Information Technology Security

Published

Author(s)

G Stoneburner

Abstract

In June 2001, ITL released NIST Special Publication (SP) 800-27, Engineering Principles for Information Technology Security (EP-ITS), by Gary Stoneburner, Clark Hayden, and Alexis Feringa. Engineering Principles for Information Technology (IT) Security (EP-ITS) provides a list of system-level security principles to be considered in the design, development, and operation of an information system. This bulletin presents an overview of the document.
Citation
ITL Bulletin -
NIST Pub Series
ITL Bulletin
Pub Type
NIST Pubs

Download Paper

Local Download

Keywords

computer security, engineering principles, IT security, security baseline
Information technology and Cybersecurity and privacy

Citation

Stoneburner, G. (2001), Engineering Principles for Information Technology Security, ITL Bulletin, National Institute of Standards and Technology, Gaithersburg, MD, [online], https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=151238 (Accessed October 28, 2025)

Issues

If you have any questions about this publication or are having problems accessing it, please contact [email protected].

Created June 1, 2001, Updated February 19, 2017
Was this page helpful?